CVE-2024-52616 — Avahi: avahi wide-area dns predictable transaction ids
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavio…
Published: 2024-11-21 · CVSS: 5.3 · CVSS 3.1
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7