CVE-2017-6519

Name of the Vulnerable Software and Affected Versions: Avahi versions 0.6.32 through 0.7

Description: The issue is related to the avahi-daemon in Avahi, which inadvertently responds to IPv6 unicast queries with source addresses that are not on-link. This allows remote attackers to cause a denial of service (traffic amplification) and may lead to information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets.

Recommendations: For Avahi versions 0.6.32 through 0.7, consider disabling the avahi-daemon service as a temporary workaround to minimize the risk of exploitation. Restrict access to port 5353 to prevent UDP packets from reaching the vulnerable service.