# CVE-2024-52615: avahi: This update for avahi fixes the following issues:  - CVE-2024-52615: wide-area DNS uses constant source port for quer...

CVE-2024-52615 is fixed in 30 products on 1 platform, first by RHSA-2025:16441, released November 15, 2024. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2024-52615
- Priority: Routine
- CVSS: 5.3 (Moderate)
- EPSS: 0.0062
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Nov 15, 2024

## Description

This update for avahi fixes the following issues:  - CVE-2024-52615: wide-area DNS uses constant source port for queries and can expose the Avahi-daemon to DNS spoofing   attacks (bsc#1233421).

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | avahi RHEL 10 | 0.9~rc2-1.el10_0.1 | [RHSA-2025:16441](https://patchblox.com/security/data/fix/linux/rhsa-2025-16441.md) | Nov 15, 2024 |
| Linux | avahi RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi almalinux 10 | 0.9~rc2-1.el10_0.1 | [ALSA-2025:16441](https://patchblox.com/security/data/fix/linux/alsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi ol 10 | 0:0.9~rc2-1.el10_0.1 | [ELSA-2025-16441](https://patchblox.com/security/data/fix/linux/elsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi opensuse-leap 15.6 | 0.8-150600.15.9.1 | [SUSE-SU-2025:03333-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03333-1.md) | Sep 24, 2025 |
| Linux | avahi opensuse-leap 16.0 | 0.8-160000.3.1 | [OPENSUSE-SU-2026:20013-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20013-1.md) | Jan 11, 2026 |
| Linux | avahi rocky 10 | 0:0.9~rc2-1.el10_0.1 | [RLSA-2025:16441](https://patchblox.com/security/data/fix/linux/rlsa-2025-16441.md) | Oct 3, 2025 |
| Linux | avahi rocky 9 | 0:0.8-22.el9_6.1 | [RLSA-2025:11402](https://patchblox.com/security/data/fix/linux/rlsa-2025-11402.md) | Oct 4, 2025 |
| Linux | avahi sles 15.6 | 0.8-150600.15.9.1 | [SUSE-SU-2025:03333-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03333-1.md) | Sep 24, 2025 |
| Linux | avahi sles 15.7 | 0.8-150600.15.9.1 | [SUSE-SU-2025:03333-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03333-1.md) | Sep 24, 2025 |
| Linux | avahi sles 16.0 | 0.8-160000.3.1 | [SUSE-SU-2026:20027-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20027-1.md) | Jan 11, 2026 |
| Linux | avahi-autoipd RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-autoipd amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-autoipd ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-autoipd-debuginfo amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-compat-howl RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-compat-howl almalinux 10 | 0.9~rc2-1.el10_0.1 | [ALSA-2025:16441](https://patchblox.com/security/data/fix/linux/alsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-compat-howl amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-compat-howl ol 10 | 0:0.9~rc2-1.el10_0.1 | [ELSA-2025-16441](https://patchblox.com/security/data/fix/linux/elsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-compat-howl ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-compat-howl-debuginfo amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-compat-howl-devel RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-compat-howl-devel almalinux 10 | 0.9~rc2-1.el10_0.1 | [ALSA-2025:16441](https://patchblox.com/security/data/fix/linux/alsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-compat-howl-devel amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-compat-howl-devel ol 10 | 0:0.9~rc2-1.el10_0.1 | [ELSA-2025-16441](https://patchblox.com/security/data/fix/linux/elsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-compat-howl-devel ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-compat-libdns_sd RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-compat-libdns_sd almalinux 10 | 0.9~rc2-1.el10_0.1 | [ALSA-2025:16441](https://patchblox.com/security/data/fix/linux/alsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-compat-libdns_sd amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-compat-libdns_sd ol 10 | 0:0.9~rc2-1.el10_0.1 | [ELSA-2025-16441](https://patchblox.com/security/data/fix/linux/elsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-compat-libdns_sd ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-compat-libdns_sd-debuginfo amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-compat-libdns_sd-devel RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-compat-libdns_sd-devel almalinux 10 | 0.9~rc2-1.el10_0.1 | [ALSA-2025:16441](https://patchblox.com/security/data/fix/linux/alsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-compat-libdns_sd-devel amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-compat-libdns_sd-devel ol 10 | 0:0.9~rc2-1.el10_0.1 | [ELSA-2025-16441](https://patchblox.com/security/data/fix/linux/elsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-compat-libdns_sd-devel ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-debuginfo amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-debugsource amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-devel RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-devel almalinux 10 | 0.9~rc2-1.el10_0.1 | [ALSA-2025:16441](https://patchblox.com/security/data/fix/linux/alsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-devel amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-devel ol 10 | 0:0.9~rc2-1.el10_0.1 | [ELSA-2025-16441](https://patchblox.com/security/data/fix/linux/elsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-devel ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-dnsconfd amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-dnsconfd-debuginfo amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-glib RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-glib almalinux 10 | 0.9~rc2-1.el10_0.1 | [ALSA-2025:16441](https://patchblox.com/security/data/fix/linux/alsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-glib amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-glib ol 10 | 0:0.9~rc2-1.el10_0.1 | [ELSA-2025-16441](https://patchblox.com/security/data/fix/linux/elsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-glib ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-glib-debuginfo amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-glib-devel RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-glib-devel almalinux 10 | 0.9~rc2-1.el10_0.1 | [ALSA-2025:16441](https://patchblox.com/security/data/fix/linux/alsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-glib-devel amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-glib-devel ol 10 | 0:0.9~rc2-1.el10_0.1 | [ELSA-2025-16441](https://patchblox.com/security/data/fix/linux/elsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-glib-devel ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-glib2 opensuse-leap 15.6 | 0.8-150600.15.9.1 | [SUSE-SU-2025:03333-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03333-1.md) | Sep 24, 2025 |
| Linux | avahi-glib2 opensuse-leap 16.0 | 0.8-160000.3.1 | [OPENSUSE-SU-2026:20013-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20013-1.md) | Jan 11, 2026 |
| Linux | avahi-glib2 sles 15.6 | 0.8-150600.15.9.1 | [SUSE-SU-2025:03333-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03333-1.md) | Sep 24, 2025 |
| Linux | avahi-glib2 sles 15.7 | 0.8-150600.15.9.1 | [SUSE-SU-2025:03333-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03333-1.md) | Sep 24, 2025 |
| Linux | avahi-glib2 sles 16.0 | 0.8-160000.3.1 | [SUSE-SU-2026:20027-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20027-1.md) | Jan 11, 2026 |
| Linux | avahi-gobject RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-gobject amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-gobject ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-gobject-debuginfo amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-gobject-devel RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-gobject-devel amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-gobject-devel ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-libs RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-libs almalinux 10 | 0.9~rc2-1.el10_0.1 | [ALSA-2025:16441](https://patchblox.com/security/data/fix/linux/alsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-libs amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-libs ol 10 | 0:0.9~rc2-1.el10_0.1 | [ELSA-2025-16441](https://patchblox.com/security/data/fix/linux/elsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-libs ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-libs-debuginfo amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-qt5 opensuse-leap 15.6 | 0.8-150600.15.9.1 | [SUSE-SU-2025:03333-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03333-1.md) | Sep 24, 2025 |
| Linux | avahi-qt6 opensuse-leap 16.0 | 0.8-160000.3.1 | [OPENSUSE-SU-2026:20013-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20013-1.md) | Jan 11, 2026 |
| Linux | avahi-tools RHEL 9 | 0:0.8-22.el9_6.1 | [RHSA-2025:11402](https://patchblox.com/security/data/fix/linux/rhsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-tools almalinux 10 | 0.9~rc2-1.el10_0.1 | [ALSA-2025:16441](https://patchblox.com/security/data/fix/linux/alsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-tools amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-tools ol 10 | 0:0.9~rc2-1.el10_0.1 | [ELSA-2025-16441](https://patchblox.com/security/data/fix/linux/elsa-2025-16441.md) | Sep 23, 2025 |
| Linux | avahi-tools ol 9 | 0:0.8-22.el9_6.1 | [ELSA-2025-11402](https://patchblox.com/security/data/fix/linux/elsa-2025-11402.md) | Jul 21, 2025 |
| Linux | avahi-tools-debuginfo amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-ui-devel amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-ui-gtk3 amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |
| Linux | avahi-ui-gtk3-debuginfo amzn 2023 | 0.8-14.amzn2023.0.14 | [ALAS2023-2024-771](https://patchblox.com/security/data/fix/linux/alas2023-2024-771.md) | Dec 5, 2024 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.