avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.

🗓️ 16 Dec 2021 08:00:00Reported by MicrosoftType

Avahi daemon answers IPv6 unicast queries with offlink sources, enabling DoS amplification and leakage.

Reporter	Title	Published	Views	Family All 90
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Hyper Converged Database	10 Nov 202522:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service due to [CVE-2017-6519]	27 Jul 202316:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	17 Oct 202400:12	–	ibm
Tenable Nessus	Amazon Linux 2 : avahi (ALAS-2020-1502)	27 Oct 202000:00	–	nessus
Tenable Nessus	CentOS 7 : avahi (RHSA-2020:1176)	10 Apr 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : avahi (EulerOS-SA-2019-1640)	27 Jun 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : avahi (EulerOS-SA-2019-1734)	22 Jul 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : avahi (EulerOS-SA-2019-1958)	23 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : avahi (EulerOS-SA-2019-2038)	24 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.3.0 : avahi (EulerOS-SA-2019-2315)	3 Dec 201900:00	–	nessus

Vulners

Node

16 Dec 2021 08:00Current

9.3High risk

Vulners AI Score9.3

CVSS 26.4

CVSS 39.1

CVSS 3.19.1

EPSS0.03646

SSVC