Threat database

CVE-2024-52616 is a moderate severity vulnerability in Avahi's Wide-Area DNS functionality involving predictable transaction IDs. Avahi is a DNS Service Discovery and Multicast DNS implementation used for Zero Configuration Networking. This flaw could allow an attacker to predict transaction IDs, potentially impacting the integrity of DNS responses. The vulnerability affects Red Hat Enterprise Linux 9 and related distributions. A security update addressing this issue is available from Red Hat. No known exploits have been reported in the wild.

CVE-2024-52615 is a medium severity vulnerability in Avahi, a local network service discovery system. The flaw involves Avahi Wide-Area DNS using a constant source port, which can enable DNS spoofing attacks. Security updates have been released by SUSE and Red Hat to address this issue by changing the source port behavior. Users of affected Avahi versions are advised to apply these patches to mitigate the risk.