CVE-2024-52616

Name: CVE-2024-52616 — Vulnerability Record
Brand: Quanteta Data Lab
SKU: CVE-2024-52616

MEDIUM

CVSS v3.1: 5.3 · EPSS: 0.0068 (47.7 percentile)

NetworkNo privilegesNo user interaction

Source data as of: 2026-06-26 05:02:17 UTC

At a glance

Severity: MEDIUM
CVSS: 5.3 v3.1 · NVD
EPSS: 0.0068 (47.7 percentile) · FIRST.org
CISA KEV: No
Attack conditions (CVSS vector): NetworkNo privilegesNo user interaction · Source: NVD Vector
Published: 2024-11-21 · Modified: 2026-06-25
References: Jump to references (4)

CVSS / EPSS / KEV

CVSS v3.1 5.3 / 10 MEDIUM Source: NVD

EPSS 0.0068 47.7 percentile Source: FIRST.org

CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

Record details

CVE ID: CVE-2024-52616
CVSS (v3.1): 5.3 (MEDIUM)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability subscore: 3.9
Impact subscore: 1.4
EPSS: 0.0068 (47.7 percentile) — 2026-06-26
CISA KEV: No
Weakness (CWE): CWE-334
Affected configurations (CPE): 0
Published: 2024-11-21
Modified: 2026-06-25
Status: Deferred

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.

Distro https://access.redhat.com/errata/RHSA-2025:7437
Distro https://access.redhat.com/security/cve/CVE-2024-52616
Distro https://bugzilla.redhat.com/show_bug.cgi?id=2326429
Reference https://github.com/avahi/avahi/pull/577

← Back to all records