1469 matches found
CVE-2024-52615
CVE-2024-52615 affects Avahi-daemon (DNS service discovery) with a flaw in fixed source ports for wide-area DNS queries, enabling easier DNS response injection. Public advisories (SUSE/SLE, EulerOS, MiracleLinux/OpenSUSE openSUSE, Unity Linux, etc.) reflect remediation via security fixes (e.g., S...
CVE-2024-52615
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...
SUSE CVE-2024-52615
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...
SUSE CVE-2024-52616
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...
CVE-2024-52616
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...
CVE-2024-52615
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...
Avahi 安全漏洞
Avahi is the Avahi open source suite of local service discovery tools for Linux. Avahi suffers from a security vulnerability that stems from the fact that it randomly initializes the DNS transaction ID only once at startup and then increments it sequentially thereafter. It is susceptible to DNS...
Avahi 安全特征问题漏洞
Avahi is the Avahi open source set of local service discovery tools for Linux. A security vulnerability exists in Avahi that stems from a dependency on fixed source ports for wide-area DNS lookups, simplifying the injection of malicious DNS response attacks...
PT-2024-35401
Name of the Vulnerable Software and Affected Versions Avahi-daemon affected versions not specified Description A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior...
PT-2024-35400
Name of the Vulnerable Software and Affected Versions Avahi-daemon affected versions not specified Description A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected. Recommendations ...
CVE-2023-1981
...
CVE-2023-1981 affecting package avahi for versions less than 0.8-3
CVE-2023-1981 affecting package avahi for versions less than 0.8-3. A patched version of the package is available...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details...
cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
A security issue has been identified in OpenPrinting CUPS. The function ppdCreatePPDFromIPP2 in the libppd library is responsible for generating a PostScript Printer Description PPD file based on attributes retrieved from an Internet Printing Protocol IPP response. Essentially, it takes printer...
Synology DiskStation Manager Exposure of Sensitive Information to an Unauthorized Actor (CVE-2015-2809)
The Multicast DNS mDNS responder in Synology DiskStation Manager DSM before 3.1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtain potentially sensitive information via...
cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
A security issue has been identified in OpenPrinting CUPS. The function ppdCreatePPDFromIPP2 in the libppd library is responsible for generating a PostScript Printer Description PPD file based on attributes retrieved from an Internet Printing Protocol IPP response. Essentially, it takes printer...
RHSA-2024:2433 Red Hat Security Advisory: avahi security update
Bulletin has no description...
RHSA-2024:0576 Red Hat Security Advisory: avahi security update
Bulletin has no description...