CVE-2024-52615
Avahi: avahi wide-area dns uses constant source port
CVE-2024-52615: Avahi: avahi wide-area dns uses constant source port. Not in the CISA KEV catalog. Medium advisory severity (CVSS 5.3, Red Hat).
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
CVE-2024-52615 at a glance
- CISA KEV
- Not listed (catalog checked )
- Highest advisory severity
- Medium
- CVSS base score
- 5.3 (Red Hat)
- Weakness
- CWE-330
- Fixed releases
- Red Hat: avahi-0:0.9~rc2-1.el10_0.1, avahi-0:0.8-22.el9_6.1, RHSA-2025:16441, RHSA-2025:11402
- Vendor advisories
- 1 from Red Hat
- VulniPulse record
- Published
Scores, vectors, weaknesses and fixed releases are quoted from vendor advisories that cover only CVE-2024-52615; bulletin-wide values are not repeated here.
Is CVE-2024-52615 exploited?
No exploitation is reported in the sources VulniPulse tracks: CVE-2024-52615 is not in the CISA KEV catalog (checked ) and no tracked advisory for it reports exploitation. That is not proof the vulnerability cannot be exploited.
How do I fix CVE-2024-52615?
Upgrade to a fixed release named by the vendor:
- Red Hat: avahi-0:0.9~rc2-1.el10_0.1, avahi-0:0.8-22.el9_6.1, RHSA-2025:16441, RHSA-2025:11402
- Configure Avahi wide-area DNS queries to be forwarded through a local DNS resolver, such as systemd-resolved, rather than sent directly by Avahi. The local resolver provides source-port randomization and reduces the risk of forged DNS responses. Apply vendor fixes when they become available. (Red Hat)
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium5.3
Medium [CVE-2024-52615] Avahi: avahi wide-area dns uses constant source port
CVE-2024-52615Source published Source updated
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected. Moderate impact affects Red Hat Enterprise Linux, OpenShift Container Platform, and Red Hat In-Vehicle OS where Avahi wide-area DNS is used. Avahi sends wide-area DNS queries from a constant source port, making malicious DNS response injection and DNS spoofing easier; the Red Hat CVSS is 5.3 (Moderate). The issue is limited to wide-area DNS, and.local multicast DNS (mDNS) is not affected. For OpenShift Container Platform, remediation is deferred because the exposure is limited to this specific wide-area DNS use; residual risk remains for configurations that actively use wide-area DNS. For delegated affected streams…
- Affected products in this advisory
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
2 more entries in the full advisory.
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- avahi-0:0.9~rc2-1.el10_0.1
- avahi-0:0.8-22.el9_6.1
- RHSA-2025:16441
- RHSA-2025:11402
- Mitigation guidance
- Configure Avahi wide-area DNS queries to be forwarded through a local DNS resolver, such as systemd-resolved, rather than sent directly by Avahi. The local resolver provides source-port randomization and reduces the risk of forged DNS responses. Apply vendor fixes when they become available.
Browse the latest tracked CVEs or the CVEs listed in CISA KEV.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.