{"id":"CVE-2024-52615","summary":"Avahi: avahi wide-area dns uses constant source port","details":"A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.","modified":"2026-11-07T02:30:46.979652751Z","published":"2024-11-21T20:34:00.981Z","related":["ALSA-2025:16441","SUSE-SU-2025:03266-1","SUSE-SU-2025:03331-1","SUSE-SU-2025:03332-1","SUSE-SU-2025:03333-1","SUSE-SU-2026:20027-1","SUSE-SU-2026:20070-1","SUSE-SU-2026:20491-1","SUSE-SU-2026:20525-1","openSUSE-SU-2025:15575-1","openSUSE-SU-2026:20013-1"],"database_specific":{"cna_assigner":"redhat","cwe_ids":["CWE-330"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52615.json","unresolved_ranges":[{"extracted_events":[{"range":[{"fixed":"0:0.9~rc2-1.el10_0.1"},{"fixed":"0:0.8-22.el9_6.1"},{"fixed":"0:0.8-22.el9_6.1"}],"source":"AFFECTED_FIELD","strategy":"InverseAffectedRanges"}]}]},"references":[{"type":"WEB","url":"https://access.redhat.com/downloads/content/package-browser/"},{"type":"WEB","url":"https://github.com/avahi/avahi/"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2025:11402"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2025:16441"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2024-52615"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52615.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52615"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2326418"},{"type":"FIX","url":"https://github.com/avahi/avahi/pull/577"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/avahi/avahi","events":[{"introduced":"0"},{"fixed":"4294bbff57cbddbbe3cfd2bbde34823277eb8723"}],"database_specific":{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"StandardRange","range":[{"introduced":"0"},{"fixed":"0.9-rc3"}]}]}}],"versions":["v0.9-rc2","v0.9-rc1","v0.8","v0.7","v0.6.32","0.6.32-rc","v0.6.31","v0.6.30","v0.6.29","v0.6.28","v0.6.27","v0.6.26","v0.6.25","v0.6.24","v0.6.23"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-52615.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}]}