CVE-2017-6519 - CVE House
Back to Database
Status published Unknown CVE-2017-6519

avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to...

Vulnerability Description

avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-6519

Credits & Attribution

No credits recorded in the NVD database.

References

More from avahi

View All →
CVE-2025-68471
Avahi has a reachable assertion in lookup_start
Medium 6.5
CVE-2025-68468
Avahi has a reachable assertion in lookup_multicast_callback
Medium 6.5
CVE-2025-68276
Avahi has a reachable assertion in avahi_wide_area_scan_cache
Medium 5.5
CVE-2025-59529
simple protocol server ignores accepts unlimited connections and logs failures without limit
Medium 5.5
CVE-2021-26720
avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed...
High 7.8

Affected Vendor

Affected Software

avahi, ubuntu linux
Vulnerable Versions:
0, 0.7, 12.04, 14.04, 16.04, 18.04, 18.10

Timeline

Official Publish: May 1st, 2017
Last Modified: December 3rd, 2025
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.