CVE catalog
CVE-2024-52615
avahi: CVE-2024-52615
- Severity
- Medium · CVSS 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.62% · Oct 25, 2026
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | avahi | sid | 0.8-18 | vulnerable |
| Debian | avahi | forky | 0.8-18 | vulnerable |
| Debian | avahi | trixie | 0.8-16 | vulnerable |
| Debian | avahi | bookworm | 0.8-10+deb12u1 | vulnerable |
| Alpine | avahi | 3.22 | 0.8-r21 | fixed |
| Alpine | avahi | 3.23 | 0.8-r21 | fixed |
| Alpine | avahi | 3.24 | 0.8-r21 | fixed |
| Ubuntu | avahi | pro | 0.7-4ubuntu5 | vulnerable |
| Ubuntu | avahi | pro | 0.7-4ubuntu6 | vulnerable |
| Ubuntu | avahi | pro | 0.7-4ubuntu7 | vulnerable |
| Ubuntu | avahi | pro | 0.7-4ubuntu7.1 | vulnerable |
| Ubuntu | avahi | pro | 0.7-4ubuntu7.2 | vulnerable |
| Ubuntu | avahi | pro | 0.7-4ubuntu7.3 | vulnerable |
| Ubuntu | avahi | pro | 0.7-4ubuntu7.3+esm1 | vulnerable |
| Ubuntu | avahi | pro | 0.7-4ubuntu7.3+esm2 | vulnerable |
| Ubuntu | avahi | 22.04 | 0.8-5ubuntu4 | vulnerable |
| Ubuntu | avahi | 22.04 | 0.8-5ubuntu5 | vulnerable |
| Ubuntu | avahi | 22.04 | 0.8-5ubuntu5.1 | vulnerable |
| Ubuntu | avahi | 22.04 | 0.8-5ubuntu5.2 | vulnerable |
| Ubuntu | avahi | 22.04 | 0.8-5ubuntu5.3 | vulnerable |
| Ubuntu | avahi | 22.04 | 0.8-5ubuntu5.4 | vulnerable |
| Ubuntu | avahi | 22.04 | 0.8-5ubuntu5.5 | vulnerable |
| Ubuntu | avahi | 24.04 | 0.8-10ubuntu1 | vulnerable |
| Ubuntu | avahi | 24.04 | 0.8-13ubuntu1 | vulnerable |
| Ubuntu | avahi | 24.04 | 0.8-13ubuntu2 | vulnerable |
| Ubuntu | avahi | 24.04 | 0.8-13ubuntu4 | vulnerable |
| Ubuntu | avahi | 24.04 | 0.8-13ubuntu5 | vulnerable |
| Ubuntu | avahi | 24.04 | 0.8-13ubuntu6 | vulnerable |
| Ubuntu | avahi | 24.04 | 0.8-13ubuntu6.1 | vulnerable |
| Ubuntu | avahi | 24.04 | 0.8-13ubuntu6.2 | vulnerable |
| Ubuntu | avahi | 25.10 | 0.8-16ubuntu2 | vulnerable |
| Ubuntu | avahi | 25.10 | 0.8-16ubuntu3 | vulnerable |
| Ubuntu | avahi | 25.10 | 0.8-16ubuntu3.1 | vulnerable |
| Ubuntu | avahi | 25.10 | 0.8-16ubuntu3.2 | vulnerable |
| Opensuse | avahi | leap 16.0 | 0.8-160000.3.1 | fixed |
| Opensuse | avahi-glib2 | leap 16.0 | 0.8-160000.3.1 | fixed |
| Opensuse | avahi-qt6 | leap 16.0 | 0.8-160000.3.1 | fixed |
| Opensuse | avahi | tumbleweed | 0.8-40.1 | fixed |
| Suse | avahi | linux micro 6.0 | 0.8-7.1 | fixed |
| Suse | avahi | linux micro 6.1 | 0.8-slfo.1.1_4.1 | fixed |
| Suse | avahi | linux enterprise server 16.0 | 0.8-160000.3.1 | fixed |
| Suse | avahi-glib2 | linux enterprise server 16.0 | 0.8-160000.3.1 | fixed |
| Suse | avahi | linux enterprise server for sap applications 16.0 | 0.8-160000.3.1 | fixed |
| Suse | avahi-glib2 | linux enterprise server for sap applications 16.0 | 0.8-160000.3.1 | fixed |
| Suse | avahi | linux micro 6.2 | 0.8-160000.3.1 | fixed |
| Suse | avahi | linux enterprise server ltss extended security 12 sp5 | 0.6.32-32.33.1 | fixed |
| Suse | avahi | linux enterprise micro 5.2 | 0.7-150100.3.43.1 | fixed |
| Suse | avahi | linux enterprise micro 5.3 | 0.8-150400.7.23.1 | fixed |
| Suse | avahi | linux enterprise micro 5.4 | 0.8-150400.7.23.1 | fixed |
| Suse | avahi | linux enterprise micro 5.5 | 0.8-150400.7.23.1 | fixed |
| Suse | avahi | linux enterprise module for basesystem 15 sp6 | 0.8-150600.15.9.1 | fixed |
| Suse | avahi-glib2 | linux enterprise module for basesystem 15 sp6 | 0.8-150600.15.9.1 | fixed |
| Suse | avahi | linux enterprise module for basesystem 15 sp7 | 0.8-150600.15.9.1 | fixed |
| Suse | avahi-glib2 | linux enterprise module for basesystem 15 sp7 | 0.8-150600.15.9.1 | fixed |
| Suse | avahi | linux enterprise module for desktop applications 15 sp6 | 0.8-150600.15.9.1 | fixed |
| Suse | avahi-glib2 | linux enterprise module for desktop applications 15 sp6 | 0.8-150600.15.9.1 | fixed |
| Suse | avahi | linux enterprise module for desktop applications 15 sp7 | 0.8-150600.15.9.1 | fixed |
| Suse | avahi-glib2 | linux enterprise module for desktop applications 15 sp7 | 0.8-150600.15.9.1 | fixed |
| Suse | avahi | linux enterprise module for package hub 15 sp6 | 0.8-150600.15.9.1 | fixed |
| Suse | avahi | linux enterprise module for package hub 15 sp7 | 0.8-150600.15.9.1 | fixed |
| Opensuse | avahi | leap 15.6 | 0.8-150600.15.9.1 | fixed |
| Opensuse | avahi-glib2 | leap 15.6 | 0.8-150600.15.9.1 | fixed |
| Opensuse | avahi-qt5 | leap 15.6 | 0.8-150600.15.9.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | avahi | source | sid | (unfixed) | not yet assigned | Not reported | [1088110] |
| Debian | avahi | source | forky | (unfixed) | not yet assigned | Not reported | [1088110] |
| Debian | avahi | source | trixie | (unfixed) | not yet assigned | Not reported | [1088110] |
| Debian | avahi | source | bookworm | (unfixed) | not yet assigned | Not reported | [1088110] |
| Alpine | avahi | apk | 3.22 | 0.8-r21 | Not reported | ALPINE-CVE-2024-52615 | Not reported |
| Alpine | avahi | apk | 3.23 | 0.8-r21 | Not reported | ALPINE-CVE-2024-52615 | Not reported |
| Alpine | avahi | apk | 3.24 | 0.8-r21 | Not reported | ALPINE-CVE-2024-52615 | Not reported |
| Opensuse | avahi | rpm | leap 16.0 | 0.8-160000.3.1 | Not reported | OPENSUSE-SU-2026:20013-1 | Not reported |
| Opensuse | avahi-glib2 | rpm | leap 16.0 | 0.8-160000.3.1 | Not reported | OPENSUSE-SU-2026:20013-1 | Not reported |
| Opensuse | avahi-qt6 | rpm | leap 16.0 | 0.8-160000.3.1 | Not reported | OPENSUSE-SU-2026:20013-1 | Not reported |
| Opensuse | avahi | rpm | tumbleweed | 0.8-40.1 | Not reported | OPENSUSE-SU-2025:15575-1 | Not reported |
| Suse | avahi | rpm | linux micro 6.0 | 0.8-7.1 | Not reported | SUSE-SU-2026:20525-1 | Not reported |
| Suse | avahi | rpm | linux micro 6.1 | 0.8-slfo.1.1_4.1 | Not reported | SUSE-SU-2026:20491-1 | Not reported |
| Suse | avahi | rpm | linux enterprise server 16.0 | 0.8-160000.3.1 | Not reported | SUSE-SU-2026:20027-1 | Not reported |
| Suse | avahi-glib2 | rpm | linux enterprise server 16.0 | 0.8-160000.3.1 | Not reported | SUSE-SU-2026:20027-1 | Not reported |
| Suse | avahi | rpm | linux enterprise server for sap applications 16.0 | 0.8-160000.3.1 | Not reported | SUSE-SU-2026:20027-1 | Not reported |
| Suse | avahi-glib2 | rpm | linux enterprise server for sap applications 16.0 | 0.8-160000.3.1 | Not reported | SUSE-SU-2026:20027-1 | Not reported |
| Suse | avahi | rpm | linux micro 6.2 | 0.8-160000.3.1 | Not reported | SUSE-SU-2026:20070-1 | Not reported |
| Suse | avahi | rpm | linux enterprise server ltss extended security 12 sp5 | 0.6.32-32.33.1 | Not reported | SUSE-SU-2025:03332-1 | Not reported |
| Suse | avahi | rpm | linux enterprise micro 5.2 | 0.7-150100.3.43.1 | Not reported | SUSE-SU-2025:03266-1 | Not reported |
| Suse | avahi | rpm | linux enterprise micro 5.3 | 0.8-150400.7.23.1 | Not reported | SUSE-SU-2025:03331-1 | Not reported |
| Suse | avahi | rpm | linux enterprise micro 5.4 | 0.8-150400.7.23.1 | Not reported | SUSE-SU-2025:03331-1 | Not reported |
| Suse | avahi | rpm | linux enterprise micro 5.5 | 0.8-150400.7.23.1 | Not reported | SUSE-SU-2025:03331-1 | Not reported |
| Suse | avahi | rpm | linux enterprise module for basesystem 15 sp6 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Suse | avahi-glib2 | rpm | linux enterprise module for basesystem 15 sp6 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Suse | avahi | rpm | linux enterprise module for basesystem 15 sp7 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Suse | avahi-glib2 | rpm | linux enterprise module for basesystem 15 sp7 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Suse | avahi | rpm | linux enterprise module for desktop applications 15 sp6 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Suse | avahi-glib2 | rpm | linux enterprise module for desktop applications 15 sp6 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Suse | avahi | rpm | linux enterprise module for desktop applications 15 sp7 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Suse | avahi-glib2 | rpm | linux enterprise module for desktop applications 15 sp7 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Suse | avahi | rpm | linux enterprise module for package hub 15 sp6 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Suse | avahi | rpm | linux enterprise module for package hub 15 sp7 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Opensuse | avahi | rpm | leap 15.6 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Opensuse | avahi-glib2 | rpm | leap 15.6 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
| Opensuse | avahi-qt5 | rpm | leap 15.6 | 0.8-150600.15.9.1 | Not reported | SUSE-SU-2025:03333-1 | Not reported |
Notes
[trixie] avahi: Minor issue; workarounds/mitigation exist by setting enable-wide-area=no [bookworm] avahi: Minor issue; workarounds/mitigation exist by setting enable-wide-area=no
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [avahi-autoipd]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [avahi-daemon]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [avahi-discover]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· all · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· all · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [avahi-dnsconfd]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [avahi-ui-utils]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [avahi-utils]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [gir1.2-avahi-0.6]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-client3]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-client-dev]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-common3]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-common-data]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-common-dev]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-compat-libdnssd1]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-compat-libdnssd-dev]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-core7]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-core-dev]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-glib1]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-glib-dev]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-gobject0]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
- [libavahi-gobject-dev]Affected
Source package: [avahi]
Details (2)
0.8-10+deb12u1· amd64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
0.8-10+deb12u1· arm64 · bookwormAffected
dsa · avahi · debian · bookworm; dsa · avahi · debian · 12
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_03266-1.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2024-52615]
- [https://osv.dev/vulnerability/ALPINE-CVE-2024-52615]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2024-52615]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03266-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03331-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03332-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03333-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20027-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20070-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20491-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20525-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2024-52615]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:15575-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:20013-1]
- [https://security-tracker.debian.org/tracker/CVE-2024-52615]
- [https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-52615.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3474.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]