avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - avahi: Multicast DNS responds to unicast queries outside of local network (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - avahi: Multicast DNS responds to unicast queries outside of local network (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - avahi: Multicast DNS responds to unicast queries outside of local network (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3876-1 advisory.

    Chad Seaman discovered that Avahi incorrectly handled certain messages. An attacker could possibly use     this issue to cause a denial of service. (CVE-2017-6519, CVE-2018-1000845)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1176 advisory.

    [0.6.31-20]
    - multicast DNS no longer responds to unicast queries outside of local network (#1663410)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has avahi packages installed that are affected by a vulnerability:

  - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source     addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by obtaining potentially sensitive information from the     responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has avahi packages installed that are affected by a vulnerability:

  - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source     addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by obtaining potentially sensitive information from the     responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1502 advisory.

  - The Multicast DNS (mDNS) responder in Synology DiskStation Manager (DSM) before 3.1 inadvertently responds     to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a     denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP     packets to the Avahi component. (CVE-2015-2809)

  - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source     addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by obtaining potentially sensitive information from the     responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the avahi packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - avahi-daemon in Avahi through 0.6.32 inadvertently     responds to IPv6 unicast queries with source addresses     that are not on-link, which allows remote attackers to     cause a denial of service (traffic amplification) or     obtain potentially sensitive information via port-5353     UDP packets. NOTE: this may overlap     CVE-2015-2809.(CVE-2017-6519)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

* avahi: Multicast DNS responds to unicast queries outside of local network

According to the version of the avahi packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - avahi-daemon in Avahi through 0.6.32 inadvertently     responds to IPv6 unicast queries with source addresses     that are not on-link, which allows remote attackers to     cause a denial of service (traffic amplification) or     obtain potentially sensitive information via port-5353     UDP packets. NOTE: this may overlap     CVE-2015-2809.(CVE-2017-6519)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1176 advisory.

  - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source     addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by obtaining potentially sensitive information from the     responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1176 advisory.

    Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero     Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware     applications allow you to plug your computer into a network and, with no configuration, view other people     to chat with, view printers to print with, and find shared files on other computers.

    Security Fix(es):

    * avahi: Multicast DNS responds to unicast queries outside of local network (CVE-2017-6519)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the avahi packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - avahi-daemon in Avahi through 0.6.32 and 0.7     inadvertently responds to IPv6 unicast queries with     source addresses that are not on-link, which allows     remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by     obtaining potentially sensitive information from the     responding device via port-5353 UDP packets.
    (CVE-2017-6519)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198862	RHEL 8 : avahi (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198809	RHEL 5 : avahi (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198799	RHEL 6 : avahi (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
183642	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Avahi vulnerabilities (USN-3876-1)	Nessus	Ubuntu Local Security Checks	critical
180707	Oracle Linux 7 : avahi (ELSA-2020-1176)	Nessus	Oracle Linux Local Security Checks	critical
164612	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.17.1)	Nessus	Misc.	critical
164596	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.15.3)	Nessus	Misc.	critical
164595	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.18)	Nessus	Misc.	critical
143959	NewStart CGSL CORE 5.05 / MAIN 5.05 : avahi Vulnerability (NS-SA-2020-0088)	Nessus	NewStart CGSL Local Security Checks	critical
143938	NewStart CGSL CORE 5.04 / MAIN 5.04 : avahi Vulnerability (NS-SA-2020-0058)	Nessus	NewStart CGSL Local Security Checks	critical
141943	Amazon Linux 2 : avahi (ALAS-2020-1502)	Nessus	Amazon Linux Local Security Checks	critical
140952	EulerOS Virtualization for ARM 64 3.0.6.0 : avahi (EulerOS-SA-2020-2004)	Nessus	Huawei Local Security Checks	critical
135799	Scientific Linux Security Update : avahi on SL7.x x86_64 (20200407)	Nessus	Scientific Linux Local Security Checks	critical
135612	EulerOS Virtualization 3.0.2.2 : avahi (EulerOS-SA-2020-1450)	Nessus	Huawei Local Security Checks	critical
135352	CentOS 7 : avahi (RHSA-2020:1176)	Nessus	CentOS Local Security Checks	critical
135048	RHEL 7 : avahi (RHSA-2020:1176)	Nessus	Red Hat Local Security Checks	critical
134517	EulerOS Virtualization for ARM 64 3.0.2.0 : avahi (EulerOS-SA-2020-1228)	Nessus	Huawei Local Security Checks	critical
131480	EulerOS Virtualization for ARM 64 3.0.3.0 : avahi (EulerOS-SA-2019-2315)	Nessus	Huawei Local Security Checks	critical
129231	EulerOS 2.0 SP3 : avahi (EulerOS-SA-2019-2038)	Nessus	Huawei Local Security Checks	critical
129115	EulerOS 2.0 SP5 : avahi (EulerOS-SA-2019-1958)	Nessus	Huawei Local Security Checks	critical
126861	EulerOS 2.0 SP2 : avahi (EulerOS-SA-2019-1734)	Nessus	Huawei Local Security Checks	critical
126267	EulerOS 2.0 SP8 : avahi (EulerOS-SA-2019-1640)	Nessus	Huawei Local Security Checks	critical

Detections

Analytics

CVE-2017-6519

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical