Bug 24308

Summary:	CVE-2010-2244: assertion failure after receiving a packet with corrupted checksum
Product:	Sisyphus	Reporter:	Vladimir Lettiev <crux>
Component:	avahi	Assignee:	Sergey Bolshakov <sbolshakov>
Status:	CLOSED FIXED	QA Contact:	qa-sisyphus
Severity:	blocker
Priority:	P3	CC:	sbolshakov
Version:	unstable	Keywords:	security
Hardware:	all
OS:	Linux
URL:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2244
Bug Depends on:	24354
Bug Blocks:

Description Vladimir Lettiev 2010-10-15 09:22:26 MSD

The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum

Fixed in Avahi >= 0.6.26

Comment 1 Vladimir Lettiev 2010-10-20 09:41:43 MSD

0.6.28-alt2 в Sisyphus. Как я понимаю можно закрывать баг?

Comment 2 Sergey Bolshakov 2010-10-20 14:11:19 MSD

да