Lucene search
K

28 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/16 12:0 a.m.3 views

EulerOS Virtualization 2.10.0 : avahi (EulerOS-SA-2026-1549)

According to the versions of the avahi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them...

5.3CVSS7.2AI score0.00083EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.2 views

EulerOS 2.0 SP11 : avahi (EulerOS-SA-2025-2454)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS...

5.3CVSS6.6AI score0.00083EPSS
Exploits0References3
OSV
OSV
added 2025/10/04 12:11 a.m.3 views

RLSA-2025:7437 Moderate: avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...

5.3CVSS6.3AI score0.00083EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 12:37 p.m.10 views

CVE-2010-1689

The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and...

6.4CVSS6.1AI score0.59398EPSS
Exploits2References1
AlmaLinux
AlmaLinux
added 2025/05/13 12:0 a.m.5 views

Moderate: avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...

5.3CVSS6.7AI score0.00083EPSS
Exploits0References4
OSV
OSV
added 2025/05/13 12:0 a.m.3 views

ALSA-2025:7437 Moderate: avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...

5.3CVSS6.5AI score0.00083EPSS
Exploits0References4
OSV
OSV
added 2025/05/12 2:34 p.m.0 views

SUSE-SU-2025:20308-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2024-52616: Fixed predictable transaction IDs for Wide-Area DNS bsc1233420 - Drop rcFOO symlinks jscPED-266...

5.3CVSS7.1AI score0.00083EPSS
Exploits0References3
Mageia
Mageia
added 2025/01/12 6:41 a.m.21 views

Updated avahi packages fix security vulnerabilities

Avahi wide-area dns uses constant source port. CVE-2024-52615 Avahi wide-area dns predictable transaction ids. CVE-2024-52616...

5.3CVSS6.9AI score0.00083EPSS
Exploits0References2
OSV
OSV
added 2025/01/12 6:41 a.m.6 views

MGASA-2025-0007 Updated avahi packages fix security vulnerabilities

Avahi wide-area dns uses constant source port. CVE-2024-52615 Avahi wide-area dns predictable transaction ids. CVE-2024-52616...

5.3CVSS5.2AI score0.00083EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/12/20 12:0 a.m.5 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : avahi (SUSE-SU-2024:4386-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4386-1 advisory. - CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs bsc1233420 Other fixes: - no long...

5.3CVSS6.7AI score0.00083EPSS
Exploits0References5
SUSE Linux
SUSE Linux
added 2024/12/19 2:4 p.m.1 views

Security update for avahi

This update for avahi fixes the following issues: CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs bsc1233420 Other fixes: - no longer supply bogus services to callbacks bsc1226586. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...

6.3CVSS6.5AI score0.00083EPSS
Exploits0References6
OSV
OSV
added 2024/12/19 2:4 p.m.2 views

SUSE-SU-2024:4386-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs bsc1233420 Other fixes: - no longer supply bogus services to callbacks bsc1226586...

5.3CVSS5.2AI score0.00083EPSS
Exploits0References4
Amazon
Amazon
added 2024/12/12 12:0 a.m.1 views

Medium: avahi

Issue Overview: avahi: Avahi Wide-Area DNS Uses Constant Source Port CVE-2024-52615 avahi: Avahi Wide-Area DNS Predictable Transaction IDs CVE-2024-52616 Affected Packages: avahi Issue Correction: Run dnf update avahi --releasever 2023.6.20241212 or dnf update --advisory ALAS2023-2024-771...

5.3CVSS8.5AI score0.00083EPSS
Exploits0
Amazon
Amazon
added 2024/12/12 12:0 a.m.4 views

Medium: avahi

Issue Overview: avahi: Avahi Wide-Area DNS Uses Constant Source Port CVE-2024-52615 avahi: Avahi Wide-Area DNS Predictable Transaction IDs CVE-2024-52616 Affected Packages: avahi Issue Correction: Run dnf update avahi --releasever 2023.6.20241212 to update your system. New Packages: aarch64: ...

5.3CVSS7.3AI score0.00083EPSS
Exploits0
OSV
OSV
added 2024/12/06 9:36 a.m.5 views

SUSE-SU-2024:4225-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs bsc1233420...

5.3CVSS5.2AI score0.00083EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/11/21 8:41 p.m.15 views

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS6.3AI score0.00083EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2024/11/21 8:41 p.m.1 views

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS7AI score0.00083EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2024/11/15 12:0 a.m.2 views

PT-2024-35401 · Unknown +4 · Avahi-Daemon +4

Name of the Vulnerable Software and Affected Versions: Avahi-daemon affected versions not specified Description: A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior...

5.3CVSS5.6AI score0.00083EPSS
Exploits0References53
OSV
OSV
added 2024/02/13 1:15 a.m.3 views

CVE-2024-25407

SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attackers to cause a Denial of Service DoS by using the predicted transaction ID's to terminate other transactions...

7.5CVSS7AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/02/13 12:0 a.m.4 views

CVE-2024-25407

SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attackers to cause a Denial of Service DoS by using the predicted transaction ID's to terminate other transactions...

7.5AI score0.00173EPSS
Exploits0References1
Rows per page
Query Builder