CVE-2010-2244
Published: 8 July 2010
The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability than CVE-2008-5081.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
avahi Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
| hardy |
Released
(0.6.22-2ubuntu4.2)
|
|
| jaunty |
Released
(0.6.23-4ubuntu4.1)
|
|
| karmic |
Released
(0.6.25-1ubuntu5.2)
|
|
| lucid |
Released
(0.6.25-1ubuntu6.1)
|
|
| upstream |
Released
(0.6.26)
|
|
|
Patches: upstream: http://git.0pointer.de/?p=avahi.git;a=commit;h=2b2844b10d7b7e5c97f9c667d664d9418bb7769a |
||