CVE-2017-6519
avahi-autoipd: avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses tha...
CVE-2017-6519 is fixed in 16 products on 1 platform, first by avahi-autoipd 0.7-3.1ubuntu1.2, released December 19, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0324
88th percentile
avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| avahi-autoipd · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | avahi-autoipd 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| avahi-daemon · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | avahi-daemon 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| avahi-discover · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | avahi-discover 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| avahi-dnsconfd · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | avahi-dnsconfd 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| avahi-ui-utils · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | avahi-ui-utils 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| avahi-utils · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | avahi-utils 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| gir1.2-avahi-0.6 · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | gir1.2-avahi-0.6 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| libavahi-client3 · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | libavahi-client3 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| libavahi-common-data · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | libavahi-common-data 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| libavahi-common3 · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | libavahi-common3 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| libavahi-compat-libdnssd1 · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | libavahi-compat-libdnssd1 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| libavahi-core7 · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | libavahi-core7 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| libavahi-glib1 · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | libavahi-glib1 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| libavahi-gobject0 · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | libavahi-gobject0 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| libavahi-ui-gtk3-0 · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | libavahi-ui-gtk3-0 0.7-3.1ubuntu1.2 | Dec 19, 2018 |
| python-avahi · Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | python-avahi 0.7-3.1ubuntu1.2 | Dec 19, 2018 |