# CVE-2017-6519: avahi-autoipd: avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses tha...

CVE-2017-6519 is fixed in 16 products on 1 platform, first by avahi-autoipd 0.7-3.1ubuntu1.2, released December 19, 2018. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2017-6519
- Priority: Routine
- CVSS: n/a (Low)
- EPSS: 0.0324
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Apr 29, 2017

## Description

avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets.  NOTE: this may overlap CVE-2015-2809.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | avahi-autoipd Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [avahi-autoipd 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-avahi-autoipd-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | avahi-daemon Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [avahi-daemon 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-avahi-daemon-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | avahi-discover Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [avahi-discover 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-avahi-discover-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | avahi-dnsconfd Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [avahi-dnsconfd 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-avahi-dnsconfd-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | avahi-ui-utils Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [avahi-ui-utils 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-avahi-ui-utils-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | avahi-utils Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [avahi-utils 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-avahi-utils-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | gir1.2-avahi-0.6 Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [gir1.2-avahi-0.6 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gir1.2-avahi-0.6-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | libavahi-client3 Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [libavahi-client3 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavahi-client3-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | libavahi-common-data Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [libavahi-common-data 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavahi-common-data-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | libavahi-common3 Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [libavahi-common3 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavahi-common3-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | libavahi-compat-libdnssd1 Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [libavahi-compat-libdnssd1 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavahi-compat-libdnssd1-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | libavahi-core7 Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [libavahi-core7 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavahi-core7-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | libavahi-glib1 Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [libavahi-glib1 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavahi-glib1-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | libavahi-gobject0 Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [libavahi-gobject0 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavahi-gobject0-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | libavahi-ui-gtk3-0 Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [libavahi-ui-gtk3-0 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavahi-ui-gtk3-0-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |
| Linux | python-avahi Ubuntu 18.04.6 LTS (bionic) | 0.7-3.1ubuntu1.2 | [python-avahi 0.7-3.1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-avahi-0.7-3.1ubuntu1.2.md) | Dec 19, 2018 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo