https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:49:46.818560+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:7437 ALSA-2025:7437 — Moderate: avahi security update 2026-10-03T23:49:47.065777+00:00

Affected: AlmaLinux:9: avahi, AlmaLinux:9: avahi-autoipd, AlmaLinux:9: avahi-compat-howl, AlmaLinux:9: avahi-compat-howl-devel, AlmaLinux:9: avahi-compat-libdns_sd, AlmaLinux:9: avahi-compat-libdns_sd-devel, AlmaLinux:9: avahi-devel, AlmaLinux:9: avahi-glib, AlmaLinux:9: avahi-glib-devel, AlmaLinux:9: avahi-gobject and 3 more

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-03600 bdu:2026-03600 2026-10-03T23:49:47.065926+00:00 bdu:2026-03600 https://cve.radiocsirt.org/vuln/bell-cve-2024-52616 BELL-CVE-2024-52616 2026-10-03T23:49:47.065951+00:00

Affected: Alpaquita:23: avahi, Alpaquita:25: avahi, Alpaquita:stream: avahi

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 certfr-2025-avi-0524 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Elles permettent à un attaquant de provoquer un prob… 2026-10-03T23:49:47.065975+00:00 certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/cleanstart-2026-mb75553 Withdrawn: CLEANSTART-2026-MB75553 — vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record 2026-10-03T23:49:47.065992+00:00

Withdrawn by the publisher.

Affected: CleanStart: playwright-python

Multiple security vulnerabilities affect the playwright-python package. A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-331215 EUVD-2026-331215 2026-10-03T23:49:47.066015+00:00 EUVD-2026-331215 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52616 fkie_cve-2024-52616 2026-10-03T23:49:47.066027+00:00

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-52616 msrc_CVE-2024-52616 — Avahi: avahi wide-area dns predictable transaction ids 2026-10-03T23:49:47.066048+00:00 msrc_CVE-2024-52616 https://cve.radiocsirt.org/vuln/oesa-2025-2251 OESA-2025-2251 — avahi security update 2026-10-03T23:49:47.066065+00:00

Affected: openEuler:24.03-LTS-SP2: avahi, openEuler:20.03-LTS-SP4: avahi, openEuler:22.03-LTS-SP3: avahi, openEuler:22.03-LTS-SP4: avahi, openEuler:24.03-LTS: avahi, openEuler:24.03-LTS-SP1: avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. Security Fix(es):

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.(CVE-2024-52615)

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.(CVE-2024-52616)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14538-1 openSUSE-SU-2024:14538-1 — avahi-0.8-37.1 on GA media 2026-10-03T23:49:47.066098+00:00

avahi-0.8-37.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:4196-1 SUSE-SU-2024:4196-1 — Security update for avahi 2026-10-03T23:49:47.066115+00:00

Security update for avahi

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-52616 UBUNTU-CVE-2024-52616 2026-10-03T23:49:47.066130+00:00

Affected: Ubuntu:Pro:14.04:LTS: avahi, Ubuntu:Pro:16.04:LTS: avahi, Ubuntu:Pro:18.04:LTS: avahi, Ubuntu:Pro:20.04:LTS: avahi, Ubuntu:22.04:LTS: avahi, Ubuntu:24.04:LTS: avahi, Ubuntu:25.10: avahi

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3474 WID-SEC-W-2024-3474 — avahi: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-03T23:49:47.066159+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in avahi ausnutzen, um Dateien zu manipulieren.