Skip to main content

Small Space of Random Values

CVE-2024-52616

Medium
5.3/10

Summary

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

  • LOW
  • NETWORK
  • LOW
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • NONE

CWE-334 - Small Space of Random Values

The number of possible random values is smaller than needed by the product, making it more susceptible to brute force attacks.

References

Advisory Timeline

  • Published