CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.

Security Fix(es):

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.(CVE-2024-52615)

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.(CVE-2024-52616)

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

• avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

• avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

• CVE-2024-52616: initialize DNS transaction IDs randomly at each startup to prevent predictability and mitigate DNS spoofing attacks

Avahi wide-area dns uses constant source port. (CVE-2024-52615) Avahi wide-area dns predictable transaction ids. (CVE-2024-52616)

These are all security issues fixed in the avahi-0.8-37.1 package on the GA media of openSUSE Tumbleweed.

Root has patched CVE-2024-52616 in the avahi package for Root:Debian:12. Multiple fixed versions available.

Root has patched CVE-2024-52616 in the avahi package for Root:Debian:13. Multiple fixed versions available.

This update for avahi fixes the following issues:

• CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420)

This update for avahi fixes the following issues:

• CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420)

This update for avahi fixes the following issues:

• CVE-2024-52616: sequential increment of DNS transaction IDs allows DNS spoofing. (bsc#1233420)

This update for avahi fixes the following issues:

• CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420)

  Other fixes:

  • no longer supply bogus services to callbacks (bsc#1226586).

This update for avahi fixes the following issues:

• CVE-2024-52616: Properly randomize query id of DNS packets (bsc#1233420).

Bug fixes:

• No longer supply bogus services to callbacks (bsc#1226586).
• Tag hardening patches as PATCH-FEATURE-OPENSUSE
• Remove dependency on /usr/bin/python3 using %python3_fix_shebang macro (bsc#1212476).

This update for avahi fixes the following issues:

• CVE-2024-52616: Fixed predictable transaction IDs for Wide-Area DNS (bsc#1233420)
• Drop rcFOO symlinks (jsc#PED-266).