VulnerabilityDeferred

CVE-2024-52616

This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

MEDIUM 5.3EPSS 0.67%

Does this matter?

Lower severity and a low EPSS score (0.67%). Track it; it rarely justifies an emergency change on its own.

Description

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS: 0.67% probability · 50th percentile
CISA KEV: Not listed
Weakness: CWE-334
Source: secalert@redhat.com

References

https://access.redhat.com/errata/RHSA-2025:7437
https://access.redhat.com/security/cve/CVE-2024-52616
https://bugzilla.redhat.com/show_bug.cgi?id=2326429
https://github.com/avahi/avahi/pull/577

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.