A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2024-52616 |
Exploitation
To exploit this vulnerability, an attacker can send crafted DNS requests to the Avahi-daemon, leveraging the predictable transaction IDs to spoof DNS responses. This could lead to unauthorized access or manipulation of network traffic.
Affected Products
- Avahi-daemon: A service that facilitates service discovery on a local network via the DNS-SD protocol.
Mitigation
To mitigate this vulnerability, it is recommended to update the Avahi-daemon to the latest version where this flaw is addressed. Additionally, implementing network security measures such as firewalls can help reduce exposure to potential attacks.