CVE Catalog
CVE-2024-52615
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.57%
43th percentile - higher than 43% of all known CVEs
Summary
A flaw in Avahi-daemon uses fixed source ports for wide-area DNS queries, making it easier for attackers to inject malicious DNS responses.
Risk Assessment
The organization is at risk of DNS spoofing attacks that can redirect traffic to malicious servers, leading to data theft or malware infection.
Recommendation
Update Avahi-daemon to the latest version that randomizes source ports for DNS queries, and consider implementing DNSSEC for additional protection.
Original NVD description (English source)
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.