Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 335885 (CVE-2010-2244) - <net-dns/avahi-0.6.27: remote DOS (CVE-2010-2244)
Summary: <net-dns/avahi-0.6.27: remote DOS (CVE-2010-2244)
Status: RESOLVED FIXED
Alias: CVE-2010-2244
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High minor
Assignee: Gentoo Security
URL: https://bugzilla.redhat.com/show_bug....
Whiteboard: B3 [glsa]
Keywords:
Depends on: CVE-2011-1002
Blocks:
  Show dependency tree
 
Reported: 2010-09-03 21:17 UTC by Stefan Behte (RETIRED)
Modified: 2011-10-22 16:32 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Behte (RETIRED) gentoo-dev Security 2010-09-03 21:17:59 UTC 
CVE-2010-2244 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-2244):
  The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in
  Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of
  service (assertion failure and daemon exit) via a DNS packet with an
  invalid checksum followed by a DNS packet with a valid checksum, a
  different vulnerability than CVE-2008-5081.
Comment 1 Sven Wegener gentoo-dev 2010-09-11 16:06:49 UTC 
There's already a fixed version (0.6.27) in the tree.
Comment 2 Tim Sammut (RETIRED) gentoo-dev 2011-02-19 16:22:47 UTC 
(In reply to comment #1)
> There's already a fixed version (0.6.27) in the tree.
> 

Thanks, Sven. We'll need a stable version too, but we should wait on a new release/fix from bug 355583.
Comment 3 GLSAMaker/CVETool Bot gentoo-dev 2011-10-22 16:32:30 UTC 
This issue was resolved and addressed in
 GLSA 201110-17 at http://security.gentoo.org/glsa/glsa-201110-17.xml
by GLSA coordinator Tobias Heinlein (keytoaster).