2 matches found
avahi: Avahi Wide-Area DNS Predictable Transaction IDs
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...
5.3CVSS5.7AI score0.00681EPSS
SaveExploits0References5
AZL-53579 CVE-2024-52616 affecting package avahi for versions less than 0.8-5
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...
5.3CVSS6.7AI score0.00681EPSS
SaveExploits0References1
20