Threats affecting pkg:deb/debian/avahi

CVE-2024-52616 is a vulnerability in Avahi-daemon where DNS transaction IDs are initialized randomly only once at startup and then incremented sequentially. This predictable pattern allows attackers to guess transaction IDs, facilitating DNS spoofing attacks. The flaw affects Avahi implementations used in various Red Hat Enterprise Linux 9 versions. A security update addressing this issue has been released by Red Hat.