CVE-2024-52616CWE-334

CVE-2024-52616

Medium · published November 22, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
51.2
In the wild
Unconfirmed
What it is

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00666 · 51.2th percentile
Weakness
CWE-334 · Small Space of Random Values
Published
2024-11-22T02:15Z
References (4)
https://access.redhat.com/errata/RHSA-2025:7437 · [email protected]https://access.redhat.com/security/cve/CVE-2024-52616 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2326429 · [email protected]https://github.com/avahi/avahi/pull/577 · [email protected]
EPSS history
Timeline
  • 21 NOV 20:41Z
    Avahi: avahi wide-area dns predictable transaction ids
    cvelistv5