Description (CNA)
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 before 0.9 |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:0.8-22.el9_6 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:0.8-22.el9_6 before * |
| Red Hat / Red Hat Enterprise Linux 7 | unknown |
| Red Hat / Red Hat Enterprise Linux 8 | affected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
CWE
CWE-334
References
- https://access.redhat.com/errata/RHSA-2025:7437
- https://access.redhat.com/security/cve/CVE-2024-52616
- https://bugzilla.redhat.com/show_bug.cgi?id=2326429
- https://github.com/avahi/avahi/pull/577
ADP enrichment
No English description supplied.
No references supplied.