Every CVE Search/ Get API key

CVE-2024-52615

Avahi: avahi wide-area dns uses constant source port

5.3 MediumFix available

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.62%Up 0.6 points since Nov 22, 2024
90%50%10%1%

What each source reports

CVE List Score used 5.3

Avahi: avahi wide-area dns uses constant source port

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Record
CVE-2024-52615
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-330
Updated
2026-11-05
EUVDEUVD-2024-46028 5.3

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Record
EUVD-2024-46028
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-05
NVD 5.3

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Record
CVE-2024-52615
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-330
Updated
2026-11-05
OSVALPINE-CVE-2024-52615 5.3

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Record
ALPINE-CVE-2024-52615
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVBELL-CVE-2024-52615 5.3
Record
BELL-CVE-2024-52615
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSV 5.3

Avahi: avahi wide-area dns uses constant source port

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Record
CVE-2024-52615
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-330
Updated
2026-11-07
Show 23 moreShow less
OSVDEBIAN-CVE-2024-52615 5.3

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Record
DEBIAN-CVE-2024-52615
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-2251 5.3

avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.

Security Fix(es):

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.(CVE-2024-52615)

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.(CVE-2024-52616)

Record
OESA-2025-2251
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:11402 5.3

Red Hat Security Advisory: avahi security update

Record
RHSA-2025:11402
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:16441 5.3

Red Hat Security Advisory: avahi security update

Record
RHSA-2025:16441
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRLSA-2025:11402 5.3

Moderate: avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

  • avahi: Avahi Wide-Area DNS Uses Constant Source Port (CVE-2024-52615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:11402
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRLSA-2025:16441 5.3

Moderate: avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

  • avahi: Avahi Wide-Area DNS Uses Constant Source Port (CVE-2024-52615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:16441
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2024-52615 5.3

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Record
UBUNTU-CVE-2024-52615
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVALSA-2025:16441 No score

Moderate: avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

  • avahi: Avahi Wide-Area DNS Uses Constant Source Port (CVE-2024-52615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:16441
Updated
2026-11-02
OSVAZL-108021 No score

CVE-2024-52615 affecting package avahi for versions less than 0.8-9

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Record
AZL-108021
Updated
2026-11-07
OSVCLSA-2025-1755886204 No score

avahi: Fix of CVE-2024-52615

  • CVE-2024-52615: fix issue with Avahi-daemon relying on fixed source ports for wide-area DNS queries to prevent attacks with injected malicious DNS responses
Record
CLSA-2025-1755886204
Updated
2026-11-02
OSVMGASA-2025-0007 No score

Updated avahi packages fix security vulnerabilities

Avahi wide-area dns uses constant source port. (CVE-2024-52615) Avahi wide-area dns predictable transaction ids. (CVE-2024-52616)

Record
MGASA-2025-0007
Updated
2026-11-02
OSVopenSUSE-SU-2025:15575-1 No score

avahi-0.8-40.1 on GA media

These are all security issues fixed in the avahi-0.8-40.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15575-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20013-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2024-52615: Fixed DNS spoofing (bsc#1233421)
Record
openSUSE-SU-2026:20013-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2024-52615 No score

CVE-2024-52615 in avahi - Patched by Root

Root has patched CVE-2024-52615 in the avahi package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2024-52615
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2024-52615 No score

CVE-2024-52615 in avahi - Patched by Root

Root has patched CVE-2024-52615 in the avahi package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2024-52615
Updated
2026-11-02
OSVSUSE-SU-2025:03266-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2024-52615: wide-area DNS uses constant source port for queries and can expose the Avahi-daemon to DNS spoofing attacks (bsc#1233421).
Record
SUSE-SU-2025:03266-1
Updated
2026-11-02
OSVSUSE-SU-2025:03331-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2024-52615: wide-area DNS uses constant source port for queries and can expose the Avahi-daemon to DNS spoofing attacks (bsc#1233421).
Record
SUSE-SU-2025:03331-1
Updated
2026-11-02
OSVSUSE-SU-2025:03332-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2024-52615: wide-area DNS uses constant source port for queries and can expose the Avahi-daemon to DNS spoofing attacks (bsc#1233421).
Record
SUSE-SU-2025:03332-1
Updated
2026-11-02
OSVSUSE-SU-2025:03333-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2024-52615: wide-area DNS uses constant source port for queries and can expose the Avahi-daemon to DNS spoofing attacks (bsc#1233421).
Record
SUSE-SU-2025:03333-1
Updated
2026-11-02
OSVSUSE-SU-2026:20027-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2024-52615: Fixed DNS spoofing (bsc#1233421)
Record
SUSE-SU-2026:20027-1
Updated
2026-11-02
OSVSUSE-SU-2026:20070-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2024-52615: Fixed DNS spoofing (bsc#1233421)
Record
SUSE-SU-2026:20070-1
Updated
2026-11-02
OSVSUSE-SU-2026:20491-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2024-52615: Fixed possible DNS response injection via the use of fixed source ports for wide-area DNS queries (bsc#1233421).
Record
SUSE-SU-2026:20491-1
Updated
2026-11-02
OSVSUSE-SU-2026:20525-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2024-52615: Resolve fixed source ports for wide-area DNS queries cause DNS responses be injected. (bsc#1233421)
  • CVE-2025-68468: Fixed DoS bug by removing incorrect assertion. (bsc#1256499)
  • CVE-2025-68471: Fixed DoS bug by changing assert to return. (bsc#1256500)
  • CVE-2025-68276: Refuse to create wide-area record browsers when wide-area is off. (bsc#1256498)
Record
SUSE-SU-2026:20525-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
avahi
Alpine:v3.22
 before 0.8-r21
0.8-r21
avahi
Alpine:v3.23
 before 0.8-r21
0.8-r21
avahi
Alpine:v3.24
 before 0.8-r21
0.8-r21
avahi
AlmaLinux:10
 before 0.9~rc2-1.el10_0.1
0.9~rc2-1.el10_0.1
avahi-compat-howl
AlmaLinux:10
 before 0.9~rc2-1.el10_0.1
0.9~rc2-1.el10_0.1
avahi-compat-howl-devel
AlmaLinux:10
 before 0.9~rc2-1.el10_0.1
0.9~rc2-1.el10_0.1
avahi-compat-libdns_sd
AlmaLinux:10
 before 0.9~rc2-1.el10_0.1
0.9~rc2-1.el10_0.1
avahi-compat-libdns_sd-devel
AlmaLinux:10
 before 0.9~rc2-1.el10_0.1
0.9~rc2-1.el10_0.1
avahi-devel
AlmaLinux:10
 before 0.9~rc2-1.el10_0.1
0.9~rc2-1.el10_0.1
avahi-glib
AlmaLinux:10
 before 0.9~rc2-1.el10_0.1
0.9~rc2-1.el10_0.1
Show 151 moreShow less
Affected packages
PackageAffectedFixed
avahi-glib-devel
AlmaLinux:10
 before 0.9~rc2-1.el10_0.1
0.9~rc2-1.el10_0.1
avahi-libs
AlmaLinux:10
 before 0.9~rc2-1.el10_0.1
0.9~rc2-1.el10_0.1
avahi-tools
AlmaLinux:10
 before 0.9~rc2-1.el10_0.1
0.9~rc2-1.el10_0.1
avahi
Azure Linux:3
 before 0.8-9
0.8-9
avahi
Alpaquita:23
 0.8-r5 up to 0.8-r8
0.8-r8
avahi
Alpaquita:25
 0.8-r20 up to 0.8-r21
0.8-r21
avahi
Alpaquita:stream
 0.8-r5 up to 0.8-r21
0.8-r21
avahi
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-autoipd
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-compat-howl
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-compat-howl-devel
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-compat-libdns_sd
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-compat-libdns_sd-devel
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-devel
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-dnsconfd
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-glib
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-glib-devel
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-gobject
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-gobject-devel
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-libs
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-tools
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-ui
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-ui-devel
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-ui-gtk3
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi-ui-tools
TuxCare:AlmaLinux:9.2
 before 0.8-12.el9_2.1.tuxcare.els3
0.8-12.el9_2.1.tuxcare.els3
avahi
Debian:12
 All versions, plus listed versions
0.8-100.8-10+deb12u10.8-110.8-120.8-13
Show 5 moreShow less
0.8-140.8-150.8-160.8-170.8-18
 None known
avahi
Debian:13
 All versions, plus listed versions
0.8-160.8-170.8-18
 None known
avahi
Debian:14
 All versions, plus listed versions
0.8-160.8-170.8-18
 None known
avahi
Mageia:9
From an advisory covering 2 CVEs
 before 0.8-10.2.mga9
0.8-10.2.mga9
avahi
openEuler:24.03-LTS-SP2
From an advisory covering 2 CVEs
 before 0.8-24.oe2403sp2
0.8-24.oe2403sp2
avahi
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 0.8-14.oe2003sp4
0.8-14.oe2003sp4
avahi
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 0.8-24.oe2203sp3
0.8-24.oe2203sp3
avahi
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 0.8-24.oe2203sp4
0.8-24.oe2203sp4
avahi
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 0.8-24.oe2403sp1
0.8-24.oe2403sp1
avahi
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 0.8-24.oe2403sp1
0.8-24.oe2403sp1
avahi-autoipd
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-autoipd-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-compat-howl-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-compat-libdns_sd-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-dnsconfd-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-glib
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-glib-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-gobject-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-tools
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-ui-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-ui-gtk3-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-ui-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-autoipd-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-compat-howl-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-compat-libdns_sd-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-dnsconfd-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-glib-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-gobject-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-libs
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-tools-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-ui-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-ui-gtk3-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-ui-tools-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-autoipd-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-compat-howl
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-compat-howl-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-compat-howl-devel
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-compat-libdns_sd
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-compat-libdns_sd-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-compat-libdns_sd-devel
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-devel
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-dnsconfd-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-glib-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-glib-devel
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-gobject
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-gobject-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-gobject-devel
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-libs-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-tools-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-ui-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-ui-gtk3-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-ui-tools-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi-autoipd-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-compat-howl-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-compat-libdns_sd-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-debugsource
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-devel
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-dnsconfd-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-glib
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-glib-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-gobject-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-libs-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-tools
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-tools-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-ui-gtk3-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-ui-tools-debuginfo
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-libs
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-compat-howl
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-compat-howl-devel
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-compat-libdns_sd
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-compat-libdns_sd-devel
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi-glib-devel
Red Hat:enterprise_linux:10.0
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi
Rocky Linux:9
 before 0:0.8-22.el9_6.1
0:0.8-22.el9_6.1
avahi
Rocky Linux:10
 before 0:0.9~rc2-1.el10_0.1
0:0.9~rc2-1.el10_0.1
avahi
Root:Debian:12
 before 0.8-10+deb12u1.root.io.11
0.8-10+deb12u1.root.io.110.8-10+deb12u1.root.io.60.8-10+deb12u1.root.io.40.8-10+deb12u1.root.io.20.8-10+deb12u1.root.io.30.8-10+deb12u1.root.io.50.8-10+deb12u1.root.io.70.8-10+deb12u1.root.io.80.8-10+deb12u1.root.io.90.8-10+deb12u1.root.io.100.8-10+deb12u1.root.io.120.8-10+deb12u1.aikido.13
rootio-avahi
Root:Debian:12
 before 0.8-10+deb12u1.root.io.11
0.8-10+deb12u1.root.io.110.8-10+deb12u1.root.io.60.8-10+deb12u1.root.io.40.8-10+deb12u1.root.io.20.8-10+deb12u1.root.io.30.8-10+deb12u1.root.io.50.8-10+deb12u1.root.io.70.8-10+deb12u1.root.io.80.8-10+deb12u1.root.io.90.8-10+deb12u1.root.io.100.8-10+deb12u1.root.io.120.8-10+deb12u1.aikido.13
avahi
Root:Debian:13
 before 0.8-16.aikido.7
0.8-16.aikido.70.8-16.root.io.40.8-16.root.io.50.8-16.root.io.60.8-16.aikido.8
rootio-avahi
Root:Debian:13
 before 0.8-16.aikido.7
0.8-16.aikido.70.8-16.root.io.40.8-16.root.io.50.8-16.root.io.60.8-16.aikido.8
avahi
SUSE:Linux Enterprise Micro 5.2
 before 0.7-150100.3.43.1
0.7-150100.3.43.1
avahi
SUSE:Linux Enterprise Micro 5.3
 before 0.8-150400.7.23.1
0.8-150400.7.23.1
avahi
SUSE:Linux Enterprise Micro 5.4
 before 0.8-150400.7.23.1
0.8-150400.7.23.1
avahi
SUSE:Linux Enterprise Micro 5.5
 before 0.8-150400.7.23.1
0.8-150400.7.23.1
avahi
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 0.6.32-32.33.1
0.6.32-32.33.1
avahi
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi-glib2
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi-glib2
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi-glib2
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi-glib2
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi
openSUSE:Leap 15.6
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi-glib2
openSUSE:Leap 15.6
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi-qt5
openSUSE:Leap 15.6
 before 0.8-150600.15.9.1
0.8-150600.15.9.1
avahi
SUSE:Linux Enterprise Server 16.0
 before 0.8-160000.3.1
0.8-160000.3.1
avahi-glib2
SUSE:Linux Enterprise Server 16.0
 before 0.8-160000.3.1
0.8-160000.3.1
avahi
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 0.8-160000.3.1
0.8-160000.3.1
avahi-glib2
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 0.8-160000.3.1
0.8-160000.3.1
avahi
SUSE:Linux Micro 6.2
 before 0.8-160000.3.1
0.8-160000.3.1
avahi
SUSE:Linux Micro 6.1
 before 0.8-slfo.1.1_4.1
0.8-slfo.1.1_4.1
avahi
SUSE:Linux Micro 6.0
From an advisory covering 4 CVEs
 before 0.8-7.1
0.8-7.1
avahi
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
0.6.31-2ubuntu40.6.31-2ubuntu50.6.31-3ubuntu10.6.31-4ubuntu10.6.31-4ubuntu1.1
Show 7 moreShow less
0.6.31-4ubuntu1.20.6.31-4ubuntu1.30.6.31-4ubuntu1.3+esm10.6.31-4ubuntu1.3+esm20.6.31-4ubuntu1.3+esm30.6.31-4ubuntu1.3+esm40.6.31-4ubuntu1.3+esm5
 None known
avahi
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.6.31-4ubuntu40.6.32~rc+dfsg-1ubuntu20.6.32~rc+dfsg-1ubuntu2.10.6.32~rc+dfsg-1ubuntu2.20.6.32~rc+dfsg-1ubuntu2.3
Show 5 moreShow less
0.6.32~rc+dfsg-1ubuntu2.3+esm10.6.32~rc+dfsg-1ubuntu2.3+esm20.6.32~rc+dfsg-1ubuntu2.3+esm30.6.32~rc+dfsg-1ubuntu2.3+esm40.6.32~rc+dfsg-1ubuntu2.3+esm5
 None known
avahi
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
0.6.32-1ubuntu10.7-3ubuntu10.7-3ubuntu20.7-3.1ubuntu10.7-3.1ubuntu1.1
Show 6 moreShow less
0.7-3.1ubuntu1.20.7-3.1ubuntu1.30.7-3.1ubuntu1.3+esm10.7-3.1ubuntu1.3+esm20.7-3.1ubuntu1.3+esm30.7-3.1ubuntu1.3+esm4
 None known
avahi
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
0.7-4ubuntu50.7-4ubuntu60.7-4ubuntu70.7-4ubuntu7.10.7-4ubuntu7.20.7-4ubuntu7.30.7-4ubuntu7.3+esm10.7-4ubuntu7.3+esm2
 None known
avahi
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.8-5ubuntu40.8-5ubuntu50.8-5ubuntu5.10.8-5ubuntu5.20.8-5ubuntu5.30.8-5ubuntu5.40.8-5ubuntu5.5
 None known
avahi
Ubuntu:24.04:LTS
 All versions, plus listed versions
0.8-10ubuntu10.8-13ubuntu10.8-13ubuntu20.8-13ubuntu40.8-13ubuntu50.8-13ubuntu60.8-13ubuntu6.10.8-13ubuntu6.2
 None known
avahi
Ubuntu:25.10
 All versions, plus listed versions
0.8-16ubuntu20.8-16ubuntu30.8-16ubuntu3.10.8-16ubuntu3.2
 None known
avahi
openSUSE:Tumbleweed
 before 0.8-40.1
0.8-40.1
avahi
openSUSE:Leap 16.0
 before 0.8-160000.3.1
0.8-160000.3.1
avahi-glib2
openSUSE:Leap 16.0
 before 0.8-160000.3.1
0.8-160000.3.1
avahi-qt6
openSUSE:Leap 16.0
 before 0.8-160000.3.1
0.8-160000.3.1

History

History
RecordedChangedSources
affectedOSV
affectedNVD, OSV
factsCVE List, EUVD
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-52615 is a medium vulnerability (CVSS 5.3) in Avahi, published November 19, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.62%, the 50th percentile. Fixed in avahi 0.8-r21.

References

Show 39 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open