https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:23:05.407362+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:16441 ALSA-2025:16441 — Moderate: avahi security update 2026-10-04T07:23:05.715034+00:00

Affected: AlmaLinux:10: avahi, AlmaLinux:10: avahi-compat-howl, AlmaLinux:10: avahi-compat-howl-devel, AlmaLinux:10: avahi-compat-libdns_sd, AlmaLinux:10: avahi-compat-libdns_sd-devel, AlmaLinux:10: avahi-devel, AlmaLinux:10: avahi-glib, AlmaLinux:10: avahi-glib-devel, AlmaLinux:10: avahi-libs, AlmaLinux:10: avahi-tools

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Avahi Wide-Area DNS Uses Constant Source Port (CVE-2024-52615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-16178 bdu:2025-16178 2026-10-04T07:23:05.715106+00:00 bdu:2025-16178 https://cve.radiocsirt.org/vuln/bell-cve-2024-52615 BELL-CVE-2024-52615 2026-10-04T07:23:05.715124+00:00

Affected: Alpaquita:23: avahi, Alpaquita:25: avahi, Alpaquita:stream: avahi

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 certfr-2025-avi-0585 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Certaines d'entre elles permettent à un attaquant de… 2026-10-04T07:23:05.715145+00:00 certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/cleanstart-2026-av29205 CLEANSTART-2026-AV29205 — Security fix for CVE-2024-52615 applied in: playwright-python 1.54.0-r1 2026-10-04T07:23:05.715160+00:00

Affected: CleanStart: playwright-python

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-331214 EUVD-2026-331214 2026-10-04T07:23:05.715179+00:00 EUVD-2026-331214 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52615 fkie_cve-2024-52615 2026-10-04T07:23:05.715204+00:00

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

 https://cve.radiocsirt.org/vuln/oesa-2025-2251 OESA-2025-2251 — avahi security update 2026-10-04T07:23:05.715262+00:00

Affected: openEuler:24.03-LTS-SP2: avahi, openEuler:20.03-LTS-SP4: avahi, openEuler:22.03-LTS-SP3: avahi, openEuler:22.03-LTS-SP4: avahi, openEuler:24.03-LTS: avahi, openEuler:24.03-LTS-SP1: avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. Security Fix(es):

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.(CVE-2024-52615)

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.(CVE-2024-52616)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15575-1 openSUSE-SU-2025:15575-1 — avahi-0.8-40.1 on GA media 2026-10-04T07:23:05.715296+00:00

avahi-0.8-40.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:16441 RHSA-2025:16441 — Red Hat Security Advisory: avahi security update 2026-10-04T07:23:05.715314+00:00

avahi: Avahi Wide-Area DNS Uses Constant Source Port

 https://cve.radiocsirt.org/vuln/suse-su-2025:03266-1 SUSE-SU-2025:03266-1 — Security update for avahi 2026-10-04T07:23:05.715329+00:00

Security update for avahi

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-52615 UBUNTU-CVE-2024-52615 2026-10-04T07:23:05.715344+00:00

Affected: Ubuntu:Pro:14.04:LTS: avahi, Ubuntu:Pro:16.04:LTS: avahi, Ubuntu:Pro:18.04:LTS: avahi, Ubuntu:Pro:20.04:LTS: avahi, Ubuntu:22.04:LTS: avahi, Ubuntu:24.04:LTS: avahi, Ubuntu:25.10: avahi

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3474 WID-SEC-W-2024-3474 — avahi: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-04T07:23:05.715369+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in avahi ausnutzen, um Dateien zu manipulieren.