Use of insufficiently random values in Avahi - CVE-2024-52615

Vulnerability identifier: #VU116005

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-52615

CWE-ID: CWE-330

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform DNS spoofing attack.

The vulnerability exists due to the application relies on fixed source ports for wide-area DNS queries. A remote attacker can guess the port used to initiate the DNS query and perform spoofing attack. 

Avahi
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
SUSE Package Hub 15
Basesystem Module
Desktop Applications Module
openSUSE Leap
openEuler
Anolis OS
IBM Observability with Instana
Business Automation Insights
avahi-utils-debuginfo
libdns_sd-32bit
avahi-compat-mDNSResponder-devel
libavahi-client3
avahi-lang
avahi-debugsource
libavahi-client3-32bit
libdns_sd
avahi
libdns_sd-debuginfo
avahi-debuginfo
libdns_sd-debuginfo-32bit
libavahi-common3-debuginfo-32bit
libavahi-common3
libavahi-client3-debuginfo-32bit
avahi-debuginfo-32bit
libavahi-devel
libavahi-core7-debuginfo
avahi-utils
libavahi-common3-debuginfo
libavahi-common3-32bit
libavahi-core7
libavahi-client3-debuginfo
avahi-compat-howl-devel
avahi-gobject
python3-avahi
avahi-ui-tools
avahi-ui-gtk3
avahi-ui-devel
avahi-tools
avahi-qt5-devel
avahi-qt5
avahi-libs
avahi-gobject-devel
avahi-glib-devel
avahi-glib
avahi-dnsconfd
avahi-devel
avahi-compat-libdns_sd-devel
avahi-compat-libdns_sd
avahi-compat-howl
avahi-autoipd
avahi-help
avahi-ui
avahi-32bit-debuginfo
libavahi-common3-32bit-debuginfo
libdns_sd-32bit-debuginfo
libavahi-glib1-32bit-debuginfo
libavahi-client3-32bit-debuginfo
libavahi-glib1-32bit
libavahi-client3-64bit
avahi-64bit-debuginfo
libavahi-client3-64bit-debuginfo
libavahi-glib1-64bit-debuginfo
libavahi-common3-64bit-debuginfo
libavahi-glib1-64bit
libavahi-common3-64bit
libdns_sd-64bit
libdns_sd-64bit-debuginfo
libavahi-qt5-1-debuginfo
libavahi-qt5-1
libavahi-glib-devel
libavahi-gobject0
libavahi-ui-gtk3-0-debuginfo
avahi-autoipd-debuginfo
libavahi-glib1-debuginfo
avahi-qt5-debugsource
libhowl0-debuginfo
libavahi-libevent1
libavahi-glib1
avahi-utils-gtk-debuginfo
libavahi-libevent1-debuginfo
avahi-utils-gtk
python3-avahi-gtk
libavahi-gobject-devel
typelib-1_0-Avahi-0_6
avahi-glib2-debugsource
libavahi-gobject0-debuginfo
libhowl0
libavahi-ui-gtk3-0
libavahi-qt5-devel
avahi (Red Hat package)
IBM Cloud Pak for Multicloud Management
Red Hat Ceph Storage
Juniper Junos Space

Install update from vendor's website.

IBM Observability with Instana - update to 1.0.307
Business Automation Insights - addressed in versions 24.0.0.0.5, 24.0.1.0.6, 25.0.0.0.3
avahi-utils-debuginfo - addressed in versions 0.6.32-32.33.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libdns_sd-32bit - addressed in versions 0.6.32-32.33.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-compat-mDNSResponder-devel - addressed in versions 0.6.32-32.33.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-client3 - addressed in versions 0.6.32-32.33.1, 0.7-150100.3.43.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-lang - addressed in versions 0.6.32-32.33.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-debugsource - addressed in versions 0.6.32-32.33.1, 0.7-150100.3.43.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-client3-32bit - addressed in versions 0.6.32-32.33.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libdns_sd - addressed in versions 0.6.32-32.33.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi - addressed in versions 0.6.32-32.33.1, 0.7-150100.3.43.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libdns_sd-debuginfo - addressed in versions 0.6.32-32.33.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-debuginfo - addressed in versions 0.6.32-32.33.1, 0.7-150100.3.43.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libdns_sd-debuginfo-32bit - update to 0.6.32-32.33.1
libavahi-common3-debuginfo-32bit - update to 0.6.32-32.33.1
libavahi-common3 - addressed in versions 0.6.32-32.33.1, 0.7-150100.3.43.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-client3-debuginfo-32bit - update to 0.6.32-32.33.1
avahi-debuginfo-32bit - update to 0.6.32-32.33.1
libavahi-devel - addressed in versions 0.6.32-32.33.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-core7-debuginfo - addressed in versions 0.6.32-32.33.1, 0.7-150100.3.43.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-utils - addressed in versions 0.6.32-32.33.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-common3-debuginfo - addressed in versions 0.6.32-32.33.1, 0.7-150100.3.43.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-common3-32bit - addressed in versions 0.6.32-32.33.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-core7 - addressed in versions 0.6.32-32.33.1, 0.7-150100.3.43.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-client3-debuginfo - addressed in versions 0.6.32-32.33.1, 0.7-150100.3.43.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-compat-howl-devel - addressed in versions 0.6.32-32.33.1, 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-gobject - update to 0.8-8
python3-avahi - update to 0.8-8
avahi-ui-tools - update to 0.8-8
avahi-ui-gtk3 - update to 0.8-8
avahi-ui-devel - update to 0.8-8
avahi-tools - update to 0.8-8
avahi-qt5-devel - update to 0.8-8
avahi-qt5 - update to 0.8-8
avahi-libs - update to 0.8-8
avahi-gobject-devel - update to 0.8-8
avahi-glib-devel - update to 0.8-8
avahi-glib - update to 0.8-8
avahi-dnsconfd - update to 0.8-8
avahi-devel - update to 0.8-8
avahi-compat-libdns_sd-devel - update to 0.8-8
avahi-compat-libdns_sd - update to 0.8-8
avahi-compat-howl-devel - update to 0.8-8
avahi-compat-howl - update to 0.8-8
avahi-autoipd - update to 0.8-8
avahi - update to 0.8-8
avahi-autoipd - update to 0.8-24
avahi - update to 0.8-24
avahi-ui-tools - update to 0.8-24
avahi-compat-howl - update to 0.8-24
avahi-compat-howl-devel - update to 0.8-24
avahi-compat-libdns_sd - update to 0.8-24
avahi-compat-libdns_sd-devel - update to 0.8-24
avahi-debuginfo - update to 0.8-24
avahi-debugsource - update to 0.8-24
avahi-devel - update to 0.8-24
avahi-dnsconfd - update to 0.8-24
avahi-glib - update to 0.8-24
avahi-gobject - update to 0.8-24
avahi-glib-devel - update to 0.8-24
avahi-help - update to 0.8-24
avahi-ui-gtk3 - update to 0.8-24
avahi-ui-devel - update to 0.8-24
avahi-ui - update to 0.8-24
avahi-tools - update to 0.8-24
avahi-libs - update to 0.8-24
avahi-gobject-devel - update to 0.8-24
avahi-32bit-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-common3-32bit-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libdns_sd-32bit-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-glib1-32bit-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-client3-32bit-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-glib1-32bit - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-client3-64bit - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-64bit-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-client3-64bit-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-glib1-64bit-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-common3-64bit-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-glib1-64bit - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-common3-64bit - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libdns_sd-64bit - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libdns_sd-64bit-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-qt5-1-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-qt5-1 - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-glib-devel - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-gobject0 - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-ui-gtk3-0-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-autoipd-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-glib1-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-qt5-debugsource - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
python3-avahi - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libhowl0-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-libevent1 - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-glib1 - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-utils-gtk-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-libevent1-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-utils-gtk - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
python3-avahi-gtk - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-gobject-devel - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-autoipd - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
typelib-1_0-Avahi-0_6 - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi-glib2-debugsource - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-gobject0-debuginfo - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libhowl0 - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-ui-gtk3-0 - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
libavahi-qt5-devel - addressed in versions 0.8-150400.7.23.1, 0.8-150600.15.9.1
avahi (Red Hat package) - update to 0.9~rc2-1.el10_0.1
IBM Cloud Pak for Multicloud Management - update to 2.3 Fix Pack 12
Red Hat Ceph Storage - update to 7.1
Juniper Junos Space - update to 26.1R1 Patch V1

• https://access.redhat.com/errata/RHSA-2025:11402
• https://access.redhat.com/security/cve/CVE-2024-52615
• https://bugzilla.redhat.com/show_bug.cgi?id=2326418
• https://github.com/avahi/avahi/security/advisories/GHSA-x6vp-f33h-h32g

• DNS spoofing attack in Avahi
• openEuler update for avahi
• Multiple vulnerabilities in Red Hat Ceph Storage 7
• SUSE update for avahi
• Anolis OS update for avahi
• SUSE update for avahi
• SUSE update for avahi
• SUSE update for avahi
• Red Hat Enterprise Linux 10 update for avahi
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• Multiple vulnerabilities in IBM Business Automation Insights
• Multiple vulnerabilities in IBM Observability with Instana
• Multiple vulnerabilities in Junos Space