Back to catalog

CVE-2024-52615 - avahi/avahi

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

CVSS 5.3 (MEDIUM)

Evidence
  • PR closed as noise: already fixed in target
  • fabricated Fixes trailer; voice/process tightened after
History
  • 2026-10-27: dropped - avahi/avahi#1003 closed unmerged