ALPINE-CVE-2017-6519

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2017-6519
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALPINE-CVE-2017-6519
Upstream
Published
2017-05-01T01:59:00.297Z
Modified
2025-12-03T22:40:41.119949Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.

References

Affected packages

Alpine:v3.10
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.11
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.12
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.13
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.14
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.15
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.16
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.17
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.18
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.19
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.20
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.21
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.22
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.23
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.7
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.6.32-r5

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.8
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"
Alpine:v3.9
avahi

Package

Name
avahi
Purl
pkg:apk/alpine/avahi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7-r2

Affected versions

0.*
0.6.28-r0
0.6.28-r1
0.6.28-r2
0.6.29-r0
0.6.30-r0
0.6.30-r1
0.6.30-r2
0.6.30-r3
0.6.30-r4
0.6.31-r0
0.6.31-r1
0.6.31-r2
0.6.31-r3
0.6.31-r4
0.6.31-r5
0.6.31-r6
0.6.31-r7
0.6.31-r8
0.6.32-r0
0.6.32-r1
0.6.32-r2
0.6.32-r3
0.6.32-r4
0.7-r0
0.7-r1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-6519.json"