PT-2024-35400 · Unknown+5 · Avahi-Daemon+5

Published 2024-11-15 · Updated 2026-02-26 · CVE-2024-52615

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Avahi-daemon (affected versions not specified)

Description A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

ALSA-2025:16441

BDU:2025-16178

CLEANSTART-2026-MB75553

CVE-2024-52615

ECHO-E755-2177-A945

INFSA-2025_11402

MGASA-2025-0007

OESA-2025-2251

OPENSUSE-SU-2025:15575-1

OPENSUSE-SU-2026:20013-1

RHSA-2025:11402

RHSA-2025:16441

RHSA-2025_11402

SUSE-SU-2025:03266-1

SUSE-SU-2025:03331-1

SUSE-SU-2025:03332-1

SUSE-SU-2025:03333-1

SUSE-SU-2025_03332-1

SUSE-SU-2025_03333-1

SUSE-SU-2026:20027-1

SUSE-SU-2026:20070-1

SUSE-SU-2026:20491-1

SUSE-SU-2026:20525-1

Affected Products

Avahi-Daemon

Debian

Red Hat

Red Os

Rocky Linux

Suse

References · 82

• https://osv.dev/vulnerability/DEBIAN-CVE-2024-52615 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-16178 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-52616 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20070-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-38471 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2024-52615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-38473 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-52615 · Security Note
• https://errata.almalinux.org/10/ALSA-2025-16441.html · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-MB75553 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20013-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-52615 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20491-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-52615 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0007.html · Security Note