#24308 – CVE-2010-2244: assertion failure after receiving a packet with corrupted checksum

Bug 24308 - CVE-2010-2244: assertion failure after receiving a packet with corrupted checksum

Summary: CVE-2010-2244: assertion failure after receiving a packet with corrupted chec...

Status:	CLOSED FIXED

Alias:	None

Product:	Sisyphus
Classification:	Development
Component:	avahi (show other bugs)
Version:	unstable
Hardware:	all Linux

Importance:	P3 blocker
Assignee:	Sergey Bolshakov
QA Contact:	qa-sisyphus

URL:	http://cve.mitre.org/cgi-bin/cvename....
Keywords:	security

Depends on:	24354
Blocks:
	Show dependency tree

Reported:	2010-10-15 09:22 MSD by Vladimir Lettiev
Modified:	2010-10-21 08:52 MSD (History)
CC List:	1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description

Vladimir Lettiev 2010-10-15 09:22:26 MSD

The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum

Fixed in Avahi >= 0.6.26

Comment 1

Vladimir Lettiev 2010-10-20 09:41:43 MSD

0.6.28-alt2 в Sisyphus. Как я понимаю можно закрывать баг?

Comment 2

Sergey Bolshakov 2010-10-20 14:11:19 MSD

да