Most recent entries from all

ALSA-2025:16441 — Moderate: avahi security update

Affected: AlmaLinux:10: avahi, AlmaLinux:10: avahi-compat-howl, AlmaLinux:10: avahi-compat-howl-devel, AlmaLinux:10: avahi-compat-libdns_sd, AlmaLinux:10: avahi-compat-libdns_sd-devel, AlmaLinux:10: avahi-devel, AlmaLinux:10: avahi-glib, AlmaLinux:10: avahi-glib-devel, AlmaLinux:10: avahi-libs, AlmaLinux:10: avahi-tools

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Avahi Wide-Area DNS Uses Constant Source Port (CVE-2024-52615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-16178

BELL-CVE-2024-52615

Affected: Alpaquita:23: avahi, Alpaquita:25: avahi, Alpaquita:stream: avahi

certfr-2025-avi-0585 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Certaines d'entre elles permettent à un attaquant de…

certfr-2025-avi-0585

CLEANSTART-2026-AV29205 — Security fix for CVE-2024-52615 applied in: playwright-python 1.54.0-r1

Affected: CleanStart: playwright-python

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-331214

fkie_cve-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

OESA-2025-2251 — avahi security update

Affected: openEuler:24.03-LTS-SP2: avahi, openEuler:20.03-LTS-SP4: avahi, openEuler:22.03-LTS-SP3: avahi, openEuler:22.03-LTS-SP4: avahi, openEuler:24.03-LTS: avahi, openEuler:24.03-LTS-SP1: avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. Security Fix(es):

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.(CVE-2024-52615)

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.(CVE-2024-52616)

openSUSE-SU-2025:15575-1 — avahi-0.8-40.1 on GA media

avahi-0.8-40.1 on GA media

RHSA-2025:16441 — Red Hat Security Advisory: avahi security update

avahi: Avahi Wide-Area DNS Uses Constant Source Port

SUSE-SU-2025:03266-1 — Security update for avahi

Security update for avahi

UBUNTU-CVE-2024-52615

Affected: Ubuntu:Pro:14.04:LTS: avahi, Ubuntu:Pro:16.04:LTS: avahi, Ubuntu:Pro:18.04:LTS: avahi, Ubuntu:Pro:20.04:LTS: avahi, Ubuntu:22.04:LTS: avahi, Ubuntu:24.04:LTS: avahi, Ubuntu:25.10: avahi

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

WID-SEC-W-2024-3474 — avahi: Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in avahi ausnutzen, um Dateien zu manipulieren.