Avahi: avahi wide-area dns uses constant source port
Priority LOW 31CWE-330Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Partial Red Hat: 6 fixed, 3 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.
Summary
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00622 50th percentileScored 2026-11-07
Fix Partial avahi (avahi): 0.9-rc3Red Hat: 2 advisoriesRed Hat: 6 fixed, 3 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| avahi | avahi | before 0.9-rc3 | 0.9-rc3 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | 0.9~rc2-1.el10_0.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 0.8-22.el9_6.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 0.8-22.el9_6.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
- avahi Vendoravahi Affected before 0.9-rc3 Fixed in 0.9-rc3 Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 0.9~rc2-1.el10_0.1 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 0.8-22.el9_6.1 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 0.8-22.el9_6.1 Patch available CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE names CNA · 7
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/o:redhat:enterprise_linux:10.0 | 10.0 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::appstream | 9 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::crb | 9 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:9::baseos | 9 | — | Red Hat |
| cpe:/o:redhat:rhel_els:7 | 7 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8 | 8 | — | Red Hat |
| cpe:/a:redhat:openshift:4 | 4 | — | Red Hat |
- cpe:/o:redhat:enterprise_linux:10.0 Versions 10.0 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::crb Versions 9 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:9::baseos Versions 9 — ·Red Hat
- cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8 Versions 8 — ·Red Hat
- cpe:/a:redhat:openshift:4 Versions 4 — ·Red Hat
Remediation
- Fix · CNA avahi (avahi) Fixed in 0.9-rc3
Red Hat 2 advisories
- RHSA-2025:16441 Released 2025-09-23 · Red Hat rating Moderateavahi security update
- Red Hat Enterprise Linux AppStream (v. 10) avahi-devel-0.9~rc2-1.el10_0.1, avahi-glib-0.9~rc2-1.el10_0.1, avahi-tools-0.9~rc2-1.el10_0.1
- Red Hat Enterprise Linux BaseOS (v. 10) avahi-0.9~rc2-1.el10_0.1, avahi-libs-0.9~rc2-1.el10_0.1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) avahi-compat-howl-0.9~rc2-1.el10_0.1, avahi-compat-howl-devel-0.9~rc2-1.el10_0.1, avahi-compat-libdns_sd-0.9~rc2-1.el10_0.1 +2
- RHSA-2025:11402 Released 2025-07-21 · Red Hat rating Moderateavahi security update
- Red Hat Enterprise Linux AppStream (v. 9) avahi-autoipd-0.8-22.el9_6.1, avahi-glib-0.8-22.el9_6.1, avahi-tools-0.8-22.el9_6.1
- Red Hat Enterprise Linux BaseOS (v. 9) avahi-0.8-22.el9_6.1, avahi-libs-0.8-22.el9_6.1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) avahi-compat-howl-0.8-22.el9_6.1, avahi-compat-howl-devel-0.8-22.el9_6.1, avahi-compat-libdns_sd-0.8-22.el9_6.1 +5
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 8 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2025:16441 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2025:11402 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2025:16441 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2025:11402 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2025:16441 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2025:11402 |
Timeline
- 2026-10-02 Threatist record created from CVE-2024-52615
- 2026-10-21 Affected versions changed · CNA
- 2026-10-21 Affected versions changed · Red Hat
- 2026-10-21 Affected versions changed · CNA
- 2026-10-22 Affected versions changed · Red Hat
- 2026-10-28 Fix available: [email protected] · CNA
- 2026-11-06 EPSS moved to the 50th–90th percentile
References
More avahi vulnerabilities
- TI-2026-27157 Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon CVSS 3.1MEDIUM 5.5
- TI-2025-37060 Avahi: simple protocol server ignores accepts unlimited connections and logs failures without limit CVSS 3.1MEDIUM 5.5
- TI-2008-04834 The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in… CVSS 2.0MEDIUM 5.0
- TI-2017-04303 avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast… CVSS 3.1CRITICAL 9.1
- TI-2011-00862 avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to… CVSS 2.0MEDIUM 5.0
- TI-2009-00723 The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in… CVSS 2.0HIGH 7.8
Sources
- CVE-2024-52615 · CVE Program
- CVE-2024-52615 · NVD
- FIRST EPSS
- CVE-2024-52615 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences