CVE-2024-52616

MEDIUM

Red Hat Enterprise Linux 9 - Predictable DNS Transaction ID in Avahi-daemon

Title source: llm

Description

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

References (4)

Core 4

Core References

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2025:7437

Vendor Advisory vdb-entry x_refsource_redhat

https://access.redhat.com/security/cve/CVE-2024-52616

Issue Tracking issue-tracking x_refsource_redhat

https://bugzilla.redhat.com/show_bug.cgi?id=2326429

https://github.com/avahi/avahi/pull/577

Scores

CVSS v3 5.3

EPSS 0.0068

EPSS Percentile 48.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-334

Status published

Products (5)

Red Hat/Red Hat Enterprise Linux 7

Red Hat/Red Hat Enterprise Linux 8

Red Hat/Red Hat Enterprise Linux 9 0:0.8-22.el9_6

Red Hat/Red Hat In-Vehicle Operating System 1

Red Hat/Red Hat OpenShift Container Platform 4

Published Nov 21, 2024

Tracked Since Feb 18, 2026