Lucene search
+L

13743 matches found

OSV
OSV
added 2024/11/21 9:15 p.m.2 views

ALPINE-CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS6.5AI score0.00681EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/11/21 9:15 p.m.6 views

CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

5.3CVSS6.7AI score0.00574EPSS
SaveExploits0References6
OSV
OSV
added 2024/11/21 9:15 p.m.13 views

CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

6.6AI score
SaveExploits0References4
OSV
OSV
added 2024/11/21 9:15 p.m.3 views

DEBIAN-CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

5.3CVSS6.4AI score0.00574EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/21 9:15 p.m.9 views

ALPINE-CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

5.3CVSS6.6AI score0.00574EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/21 9:15 p.m.23 views

CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

5.3CVSS0.00574EPSS
SaveExploits0References5
OSV
OSV
added 2024/11/21 9:15 p.m.8 views

UBUNTU-CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

5.3CVSS6.9AI score0.00574EPSS
SaveExploits0References4
OSV
OSV
added 2024/11/21 9:15 p.m.8 views

UBUNTU-CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS7.1AI score0.00681EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/11/21 8:41 p.m.15 views

CVE-2024-52616 Avahi: avahi wide-area dns predictable transaction ids

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS5.1AI score0.00681EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/11/21 8:41 p.m.33 views

CVE-2024-52616 Avahi: avahi wide-area dns predictable transaction ids

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS0.00681EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2024/11/21 8:41 p.m.8 views

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS7AI score0.00681EPSS
SaveExploits0
CVE
CVE
added 2024/11/21 8:41 p.m.126 views

CVE-2024-52616

CVE-2024-52616 affects the Avahi-daemon. The vulnerability arises because DNS transaction IDs are initialized randomly only at startup and then incremented, making it possible for an attacker to predict IDs and perform DNS spoofing. The connected documents confirm the issue and reference the same...

5.3CVSS5AI score0.00681EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/11/21 8:34 p.m.15 views

CVE-2024-52615 Avahi: avahi wide-area dns uses constant source port

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

5.3CVSS5.2AI score0.00574EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2024/11/21 8:34 p.m.7 views

CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

5.3CVSS7.2AI score0.00574EPSS
SaveExploits0
CVE
CVE
added 2024/11/21 8:34 p.m.116 views

CVE-2024-52615

CVE-2024-52615 affects Avahi-daemon (DNS service discovery) with a flaw in fixed source ports for wide-area DNS queries, enabling easier DNS response injection. Public advisories (SUSE/SLE, EulerOS, MiracleLinux/OpenSUSE openSUSE, Unity Linux, etc.) reflect remediation via security fixes (e.g., S...

5.3CVSS5.2AI score0.00574EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/11/21 8:34 p.m.32 views

CVE-2024-52615 Avahi: avahi wide-area dns uses constant source port

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

5.3CVSS0.00574EPSS
SaveExploits0References5
Hacker One
Hacker One
added 2024/11/21 7:06 p.m.29 views

Monero: low-level p2p ping + tcp flooding leads to a remote crash in monerod

The vulnerability allowed remote crashes of the P2P daemon through low-level ping and TCP flooding...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/11/21 12:00 a.m.14 views

CBL Mariner 2.0 Security Update: frr (CVE-2024-34088)

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-34088 advisory. - In FRRouting FRR through 9.1, it is possible for the getedge function in ospfte.c in the OSPF daemon to return ...

7.5CVSS7.5AI score0.00695EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/11/21 12:00 a.m.15 views

Juniper Junos OS Multiple Vulnerabilities (JSA88136)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA88136 advisory. - An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon evo- pfemand of Juniper Networks Junos OS Evolved allows an...

7.1CVSS5.8AI score0.00391EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/11/19 3:48 a.m.4 views

SUSE CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

5.3CVSS6.6AI score0.00574EPSS
SaveExploits0References12
Rows per page
Query Builder