CVE-2024-52616: CVE-2024-52616: güvenlik açığı

Açıklama (NVD)

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

Özet bilgiler

CVSS v3.1

5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

%0,73 (yüzdelik 54)

CWE

CWE-334

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• access.redhat.com
• access.redhat.com
• bugzilla.redhat.com
• github.com
• CWE-334