{"id":"CVE-2024-52616","aliases":["ALPINE-CVE-2024-52616","ALSA-2025:7437","AZL-53579","AZL-53756","BELL-CVE-2024-52616","CLSA-2025-1753988282","DEBIAN-CVE-2024-52616","EUVD-2024-46029","MGASA-2025-0007","OESA-2025-2251","RHSA-2025:7437","RLSA-2025:7437","ROOT-OS-DEBIAN-12-CVE-2024-52616","ROOT-OS-DEBIAN-13-CVE-2024-52616","SUSE-SU-2024:4196-1","SUSE-SU-2024:4225-1","SUSE-SU-2024:4282-1","SUSE-SU-2024:4386-1","SUSE-SU-2025:20103-1","SUSE-SU-2025:20308-1","UBUNTU-CVE-2024-52616","openSUSE-SU-2024:14538-1"],"status":"published","title":"Avahi: avahi wide-area dns predictable transaction ids","description":"A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00726,"percentile":0.54459,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-334"],"published":"2024-11-19T05:59:14.476919Z","modified":"2026-11-05T21:15:30Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"avahi","fixed_in":["0.8-r21"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"avahi","fixed_in":["0.8-r21"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"avahi","fixed_in":["0.8-r21"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-autoipd","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-compat-howl","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-compat-howl-devel","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-compat-libdns_sd","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-compat-libdns_sd-devel","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-devel","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-glib","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-glib-devel","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-gobject","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-gobject-devel","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-libs","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"avahi-tools","fixed_in":["0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"avahi","fixed_in":["0.8-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"avahi","fixed_in":["0.8-4"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"avahi","fixed_in":["0.8-r8"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"avahi","fixed_in":["0.8-r21"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"avahi","fixed_in":["0.8-r21"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-autoipd","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-dnsconfd","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-libs","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-tools","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-gtk3","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-tools","fixed_in":["0.8-12.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"avahi","fixed_in":["0.8-18"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-autoipd","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-autoipd-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-compat-howl-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-compat-libdns_sd-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-debugsource","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-dnsconfd-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-glib","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-glib-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-gobject-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-libs-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-tools","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-tools-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-ui-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-ui-gtk3-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-ui-tools-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-autoipd-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-compat-howl-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-compat-libdns_sd-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-debugsource","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-dnsconfd-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-glib-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-gobject-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-libs","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-libs-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-tools-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-ui-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-ui-gtk3-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-ui-tools-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-autoipd-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-howl","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-howl-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-howl-devel","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-libdns_sd","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-libdns_sd-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-libdns_sd-devel","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-debugsource","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-devel","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-dnsconfd-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-glib-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-glib-devel","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-gobject","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-gobject-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-gobject-devel","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-libs-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-tools-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-ui-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-ui-gtk3-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-ui-tools-debuginfo","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"avahi","fixed_in":["0:0.8-22.el9_6"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"avahi","fixed_in":["0.8-10+deb12u1.root.io.11","0.8-10+deb12u1.root.io.6","0.8-10+deb12u1.root.io.4","0.8-10+deb12u1.root.io.2","0.8-10+deb12u1.root.io.3","0.8-10+deb12u1.root.io.5","0.8-10+deb12u1.root.io.7","0.8-10+deb12u1.root.io.8","0.8-10+deb12u1.root.io.9","0.8-10+deb12u1.root.io.10","0.8-10+deb12u1.root.io.12","0.8-10+deb12u1.aikido.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-avahi","fixed_in":["0.8-10+deb12u1.root.io.11","0.8-10+deb12u1.root.io.6","0.8-10+deb12u1.root.io.4","0.8-10+deb12u1.root.io.2","0.8-10+deb12u1.root.io.3","0.8-10+deb12u1.root.io.5","0.8-10+deb12u1.root.io.7","0.8-10+deb12u1.root.io.8","0.8-10+deb12u1.root.io.9","0.8-10+deb12u1.root.io.10","0.8-10+deb12u1.root.io.12","0.8-10+deb12u1.aikido.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"avahi","fixed_in":["0.8-16.aikido.7","0.8-16.root.io.6","0.8-16.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-avahi","fixed_in":["0.8-16.aikido.7","0.8-16.root.io.6","0.8-16.aikido.8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"avahi","fixed_in":["0.8-150600.15.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"avahi-glib2","fixed_in":["0.8-150600.15.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"avahi","fixed_in":["0.8-150600.15.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"avahi-glib2","fixed_in":["0.8-150600.15.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"avahi","fixed_in":["0.8-150600.15.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"avahi","fixed_in":["0.8-150600.15.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"avahi-glib2","fixed_in":["0.8-150600.15.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"avahi-qt5","fixed_in":["0.8-150600.15.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"avahi","fixed_in":["0.7-150100.3.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"avahi","fixed_in":["0.6.32-32.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"avahi-glib2","fixed_in":["0.6.32-32.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"avahi","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"avahi","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"avahi","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"avahi","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"avahi-glib2","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"avahi","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"avahi-glib2","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"avahi","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.5","package":"avahi","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"avahi","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"avahi-glib2","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"avahi-qt5","fixed_in":["0.8-150400.7.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"avahi","fixed_in":["0.8-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"avahi","fixed_in":["0.8-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"avahi","fixed_in":["0.8-37.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-r21"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-r21"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-r21"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-4"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8-r5"},{"fixed":"0.8-r8"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8-r20"},{"fixed":"0.8-r21"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8-r5"},{"fixed":"0.8-r21"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-dnsconfd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-10","0.8-10+deb12u1","0.8-11","0.8-12","0.8-13","0.8-14","0.8-15","0.8-16","0.8-17","0.8-18"]},{"source":"osv","ecosystem":"Debian:13","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-16","0.8-17","0.8-18"]},{"source":"osv","ecosystem":"Debian:14","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-18"}]}],"versions":["0.8-16","0.8-17"]},{"source":"osv","ecosystem":"Mageia:9","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-10.2.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-24.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-14.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-24.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-24.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-24.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-24.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-autoipd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-compat-howl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-compat-libdns_sd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-dnsconfd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-gobject-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-ui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-ui-gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"avahi-ui-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-autoipd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-compat-howl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-compat-libdns_sd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-dnsconfd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-gobject-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-ui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-ui-gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"avahi-ui-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-autoipd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-howl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-libdns_sd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-dnsconfd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-gobject-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-ui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-ui-gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"avahi-ui-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-22.el9_6"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-10+deb12u1.root.io.11"},{"fixed":"0.8-10+deb12u1.root.io.6"},{"fixed":"0.8-10+deb12u1.root.io.4"},{"fixed":"0.8-10+deb12u1.root.io.2"},{"fixed":"0.8-10+deb12u1.root.io.3"},{"fixed":"0.8-10+deb12u1.root.io.5"},{"fixed":"0.8-10+deb12u1.root.io.7"},{"fixed":"0.8-10+deb12u1.root.io.8"},{"fixed":"0.8-10+deb12u1.root.io.9"},{"fixed":"0.8-10+deb12u1.root.io.10"},{"fixed":"0.8-10+deb12u1.root.io.12"},{"fixed":"0.8-10+deb12u1.aikido.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-10+deb12u1.root.io.11"},{"fixed":"0.8-10+deb12u1.root.io.6"},{"fixed":"0.8-10+deb12u1.root.io.4"},{"fixed":"0.8-10+deb12u1.root.io.2"},{"fixed":"0.8-10+deb12u1.root.io.3"},{"fixed":"0.8-10+deb12u1.root.io.5"},{"fixed":"0.8-10+deb12u1.root.io.7"},{"fixed":"0.8-10+deb12u1.root.io.8"},{"fixed":"0.8-10+deb12u1.root.io.9"},{"fixed":"0.8-10+deb12u1.root.io.10"},{"fixed":"0.8-10+deb12u1.root.io.12"},{"fixed":"0.8-10+deb12u1.aikido.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16.aikido.7"},{"fixed":"0.8-16.root.io.6"},{"fixed":"0.8-16.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16.aikido.7"},{"fixed":"0.8-16.root.io.6"},{"fixed":"0.8-16.aikido.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"avahi-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7-150100.3.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.32-32.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.32-32.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"avahi-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.31-2ubuntu4","0.6.31-2ubuntu5","0.6.31-3ubuntu1","0.6.31-4ubuntu1","0.6.31-4ubuntu1.1","0.6.31-4ubuntu1.2","0.6.31-4ubuntu1.3","0.6.31-4ubuntu1.3+esm1","0.6.31-4ubuntu1.3+esm2","0.6.31-4ubuntu1.3+esm3","0.6.31-4ubuntu1.3+esm4","0.6.31-4ubuntu1.3+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.31-4ubuntu4","0.6.32~rc+dfsg-1ubuntu2","0.6.32~rc+dfsg-1ubuntu2.1","0.6.32~rc+dfsg-1ubuntu2.2","0.6.32~rc+dfsg-1ubuntu2.3","0.6.32~rc+dfsg-1ubuntu2.3+esm1","0.6.32~rc+dfsg-1ubuntu2.3+esm2","0.6.32~rc+dfsg-1ubuntu2.3+esm3","0.6.32~rc+dfsg-1ubuntu2.3+esm4","0.6.32~rc+dfsg-1ubuntu2.3+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.32-1ubuntu1","0.7-3ubuntu1","0.7-3ubuntu2","0.7-3.1ubuntu1","0.7-3.1ubuntu1.1","0.7-3.1ubuntu1.2","0.7-3.1ubuntu1.3","0.7-3.1ubuntu1.3+esm1","0.7-3.1ubuntu1.3+esm2","0.7-3.1ubuntu1.3+esm3","0.7-3.1ubuntu1.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7-4ubuntu5","0.7-4ubuntu6","0.7-4ubuntu7","0.7-4ubuntu7.1","0.7-4ubuntu7.2","0.7-4ubuntu7.3","0.7-4ubuntu7.3+esm1","0.7-4ubuntu7.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-5ubuntu4","0.8-5ubuntu5","0.8-5ubuntu5.1","0.8-5ubuntu5.2","0.8-5ubuntu5.3","0.8-5ubuntu5.4","0.8-5ubuntu5.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-10ubuntu1","0.8-13ubuntu1","0.8-13ubuntu2","0.8-13ubuntu4","0.8-13ubuntu5","0.8-13ubuntu6","0.8-13ubuntu6.1","0.8-13ubuntu6.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-16ubuntu2","0.8-16ubuntu3","0.8-16ubuntu3.1","0.8-16ubuntu3.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-37.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat openshift container platform 4"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:7437","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-52616","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2326429","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://github.com/avahi/avahi/pull/577","tags":["fix","article"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-52616","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2326429","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-7437.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52616","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-52616","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1753988282.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/avahi/avahi/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52616.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-52616","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0007.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33829","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/G3ABDXZMFN73MQ62ZJOBQIVUE3HAEKVL/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2251","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52615","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7437.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-52616","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2025:7437","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244196-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1233420","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52616","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244225-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244282-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244386-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1226586","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520103-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1212476","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520308-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-52616","tags":["report"]},{"url":"https://github.com/avahi/avahi/issues/254#issuecomment-2480519212","tags":["report"]},{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-r9j3-vjjh-p8vm","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/G3ABDXZMFN73MQ62ZJOBQIVUE3HAEKVL/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-52616","title":"Avahi: avahi wide-area dns predictable transaction ids","description":"A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.","status":"published","published":"2024-11-21T20:41:11.636Z","modified":"2026-11-05T13:51:43.842Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-334"],"updated_at":"2026-11-05T16:36:33.176634Z"}],"euvd":[{"id":"EUVD-2024-46029","description":"A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.","status":"published","published":"2024-11-21T20:41:11Z","modified":"2026-11-05T13:51:43Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-05T16:59:57.845813Z"}],"nvd":[{"id":"CVE-2024-52616","description":"A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.","status":"published","published":"2024-11-21T21:15:24.14Z","modified":"2026-11-05T14:16:58.097Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-334"],"updated_at":"2026-11-05T19:55:50.758755Z"}],"osv":[{"id":"ALPINE-CVE-2024-52616","description":"A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.","status":"published","published":"2024-11-21T21:15:24.14Z","modified":"2026-11-02T11:17:50.127301478Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2024-52616","status":"published","published":"2024-11-19T05:59:14.476919Z","modified":"2026-01-26T09:42:41.21474Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:20.963569Z"},{"id":"CVE-2024-52616","title":"Avahi: avahi wide-area dns predictable transaction ids","description":"A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.","status":"published","published":"2024-11-21T20:41:11.636Z","modified":"2026-11-07T02:31:11.568603264Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-334"],"updated_at":"2026-11-07T03:07:54.590815Z"},{"id":"DEBIAN-CVE-2024-52616","description":"A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.","status":"published","published":"2024-11-21T21:15:24.14Z","modified":"2026-10-29T09:47:42.831014927Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:44.117337Z"},{"id":"OESA-2025-2251","title":"avahi security update","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.(CVE-2024-52615)\n\nA flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.(CVE-2024-52616)","status":"published","published":"2025-09-12T11:09:19Z","modified":"2026-08-18T01:19:10.700606974Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2025:7437","title":"Red Hat Security Advisory: avahi security update","status":"published","published":"2025-05-14T10:06:26Z","modified":"2026-06-30T10:28:03Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RLSA-2025:7437","title":"Moderate: avahi security update","description":"Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.\n\nSecurity Fix(es):\n\n* avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-04T00:49:28.623441Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2024-52616","description":"A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.","status":"published","published":"2024-11-21T21:15:00Z","modified":"2026-05-20T16:19:27.205616109Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:11.182485Z"},{"id":"ALSA-2025:7437","title":"Moderate: avahi security update","description":"Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.  \n\nSecurity Fix(es):  \n\n  * avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:32:17.679032305Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"AZL-53579","title":"CVE-2024-52616 affecting package avahi for versions less than 0.8-5","description":"A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.","status":"published","published":"2024-11-21T21:15:24Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:20.828909Z"},{"id":"AZL-53756","title":"CVE-2024-52616 affecting package avahi for versions less than 0.8-4","description":"A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.","status":"published","published":"2024-11-21T21:15:24Z","modified":"2026-04-21T04:35:21.717723Z","updated_at":"2026-11-02T15:28:06.595149Z"},{"id":"CLSA-2025-1753988282","title":"avahi: Fix of CVE-2024-52616","description":"- CVE-2024-52616: initialize DNS transaction IDs randomly at each startup to\n  prevent predictability and mitigate DNS spoofing attacks","status":"published","published":"2025-07-31T18:58:05Z","modified":"2026-06-01T00:30:44.695501343Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"MGASA-2025-0007","title":"Updated avahi packages fix security vulnerabilities","description":"Avahi wide-area dns uses constant source port. (CVE-2024-52615)\nAvahi wide-area dns predictable transaction ids. (CVE-2024-52616)\n","status":"published","published":"2025-01-12T06:41:01Z","modified":"2026-04-16T04:40:50.467254837Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14538-1","title":"avahi-0.8-37.1 on GA media","description":"These are all security issues fixed in the avahi-0.8-37.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-12-02T00:00:00Z","modified":"2025-05-07T18:16:24.246309Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2024-52616","title":"CVE-2024-52616 in avahi - Patched by Root","description":"Root has patched CVE-2024-52616 in the avahi package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T08:31:45Z","modified":"2026-08-26T01:10:11.194052319Z","updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2024-52616","title":"CVE-2024-52616 in avahi - Patched by Root","description":"Root has patched CVE-2024-52616 in the avahi package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-08-23T14:15:48Z","modified":"2026-08-23T17:00:07.303945571Z","updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"SUSE-SU-2024:4196-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420)\n","status":"published","published":"2024-12-05T12:56:07Z","modified":"2026-02-04T02:28:13.360714Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4225-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420)\n","status":"published","published":"2024-12-06T09:36:01Z","modified":"2025-05-02T04:37:13.460486Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4282-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2024-52616: sequential increment of DNS transaction IDs allows DNS spoofing. (bsc#1233420)\n","status":"published","published":"2024-12-10T18:03:36Z","modified":"2026-02-04T04:12:54.692773Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4386-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420)\n\n  Other fixes: \n  - no longer supply bogus services to callbacks (bsc#1226586).\n","status":"published","published":"2024-12-19T14:04:19Z","modified":"2026-02-04T02:48:04.108252Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:20103-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2024-52616: Properly randomize query id of DNS packets (bsc#1233420).\n\nBug fixes:\n\n- No longer supply bogus services to callbacks (bsc#1226586).\n- Tag hardening patches as PATCH-FEATURE-OPENSUSE\n- Remove dependency on /usr/bin/python3 using %python3_fix_shebang macro (bsc#1212476).\n","status":"published","published":"2025-02-03T09:17:27Z","modified":"2026-03-23T04:47:08.53213Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20308-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2024-52616: Fixed predictable transaction IDs for Wide-Area DNS (bsc#1233420)\n- Drop rcFOO symlinks (jsc#PED-266).\n","status":"published","published":"2025-05-12T14:34:04Z","modified":"2026-03-23T04:48:55.529449Z","updated_at":"2026-11-02T15:53:59.381172Z"}]}}