avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3876-1 advisory.

  - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source     addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by obtaining potentially sensitive information from the     responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. (CVE-2017-6519)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1176 advisory.

  - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source     addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by obtaining potentially sensitive information from the     responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has avahi packages installed that are affected by a vulnerability:

  - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source     addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by obtaining potentially sensitive information from the     responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has avahi packages installed that are affected by a vulnerability:

  - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source     addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by obtaining potentially sensitive information from the     responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1502 advisory.

  - The Multicast DNS (mDNS) responder in Synology DiskStation Manager (DSM) before 3.1 inadvertently responds     to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a     denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP     packets to the Avahi component. (CVE-2015-2809)

  - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source     addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by obtaining potentially sensitive information from the     responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the avahi packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - avahi-daemon in Avahi through 0.6.32 inadvertently     responds to IPv6 unicast queries with source addresses     that are not on-link, which allows remote attackers to     cause a denial of service (traffic amplification) or     obtain potentially sensitive information via port-5353     UDP packets. NOTE: this may overlap     CVE-2015-2809.(CVE-2017-6519)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

* avahi: Multicast DNS responds to unicast queries outside of local network

According to the version of the avahi packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - avahi-daemon in Avahi through 0.6.32 inadvertently     responds to IPv6 unicast queries with source addresses     that are not on-link, which allows remote attackers to     cause a denial of service (traffic amplification) or     obtain potentially sensitive information via port-5353     UDP packets. NOTE: this may overlap     CVE-2015-2809.(CVE-2017-6519)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1176 advisory.

  - avahi: Multicast DNS responds to unicast queries outside     of local network (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1176 advisory.

  - avahi: Multicast DNS responds to unicast queries outside of local network (CVE-2017-6519)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the avahi packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - avahi-daemon in Avahi through 0.6.32 and 0.7     inadvertently responds to IPv6 unicast queries with     source addresses that are not on-link, which allows     remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by     obtaining potentially sensitive information from the     responding device via port-5353 UDP packets.
    (CVE-2017-6519)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
183642	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Avahi vulnerabilities (USN-3876-1)	Nessus	Ubuntu Local Security Checks	critical
180707	Oracle Linux 7 : avahi (ELSA-2020-1176)	Nessus	Oracle Linux Local Security Checks	critical
164612	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.17.1)	Nessus	Misc.	critical
164595	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.18)	Nessus	Misc.	critical
143959	NewStart CGSL CORE 5.05 / MAIN 5.05 : avahi Vulnerability (NS-SA-2020-0088)	Nessus	NewStart CGSL Local Security Checks	critical
143938	NewStart CGSL CORE 5.04 / MAIN 5.04 : avahi Vulnerability (NS-SA-2020-0058)	Nessus	NewStart CGSL Local Security Checks	critical
141943	Amazon Linux 2 : avahi (ALAS-2020-1502)	Nessus	Amazon Linux Local Security Checks	critical
140952	EulerOS Virtualization for ARM 64 3.0.6.0 : avahi (EulerOS-SA-2020-2004)	Nessus	Huawei Local Security Checks	critical
135799	Scientific Linux Security Update : avahi on SL7.x x86_64 (20200407)	Nessus	Scientific Linux Local Security Checks	critical
135612	EulerOS Virtualization 3.0.2.2 : avahi (EulerOS-SA-2020-1450)	Nessus	Huawei Local Security Checks	critical
135352	CentOS 7 : avahi (CESA-2020:1176)	Nessus	CentOS Local Security Checks	critical
135048	RHEL 7 : avahi (RHSA-2020:1176)	Nessus	Red Hat Local Security Checks	critical
134517	EulerOS Virtualization for ARM 64 3.0.2.0 : avahi (EulerOS-SA-2020-1228)	Nessus	Huawei Local Security Checks	critical
131480	EulerOS Virtualization for ARM 64 3.0.3.0 : avahi (EulerOS-SA-2019-2315)	Nessus	Huawei Local Security Checks	critical
129231	EulerOS 2.0 SP3 : avahi (EulerOS-SA-2019-2038)	Nessus	Huawei Local Security Checks	critical
129115	EulerOS 2.0 SP5 : avahi (EulerOS-SA-2019-1958)	Nessus	Huawei Local Security Checks	critical
126861	EulerOS 2.0 SP2 : avahi (EulerOS-SA-2019-1734)	Nessus	Huawei Local Security Checks	critical
126267	EulerOS 2.0 SP8 : avahi (EulerOS-SA-2019-1640)	Nessus	Huawei Local Security Checks	critical

Detections

Analytics

CVE-2017-6519

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical