CVE-2024-52616

Description

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

CVSS v3.1 Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness Type (CWE)

CWE-334 CWE-334

References

Other References

https://access.redhat.com/errata/RHSA-2025:7437 https://access.redhat.com/security/cve/CVE-2024-52616 https://bugzilla.redhat.com/show_bug.cgi?id=2326429 https://github.com/avahi/avahi/pull/577

Frequently Asked Questions

What is CVE-2024-52616? +

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs. It has a CVSS v3.1 base score of 5.3 (MEDIUM).

How severe is CVE-2024-52616? +

CVE-2024-52616 has a CVSS v3.1 score of 5.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

How do I check if I'm vulnerable to CVE-2024-52616? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-3895

Token used for resetting passwords in MegaBIP software are generated using a small space of random values combined with a …

CVE-2024-6890 8.8

Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation …

CVE-2023-6951 6.6

A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a …

CVE-2024-54017 5.3

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), …

CVE-2024-51720 4.8

An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow …