Avahi can run into an infinite loop on reception of a bad packet

Bug #76012 reported by Trent Lloyd
254
Affects Status Importance Assigned to Milestone
Avahi
Fix Released
Unknown
avahi (Ubuntu)
Fix Released
High
Martin Pitt
Breezy
Fix Released
High
Kees Cook
Dapper
Fix Released
High
Kees Cook
Edgy
Fix Released
High
Kees Cook

Bug Description

Avahi has a bug that can cause it to run into a 100% CPU-using loop

It has been fixed by the following changesets

http://www.avahi.org/changeset/1340
http://www.avahi.org/changeset/1341
http://www.avahi.org/changeset/1342

R1340 fixes the problem, R1341 is a slight cosmetic fix (uses a #define rather than the raw value), would prefer to include this so it matches upstream

R1342 adds some extra checks that haven't been proven to cause a problem but are good, you may not apply this bu certainly at a minimum R1340 is required to fix this bug.

Trent Lloyd (lathiat)
Changed in avahi:
importance: Undecided → High
status: Unconfirmed → Confirmed
Martin Pitt (pitti)
Changed in avahi:
assignee: nobody → pitti
status: Confirmed → In Progress
Revision history for this message
Martin Pitt (pitti) wrote :

This has been fixed in Feisty with 0.6.16.

Changed in avahi:
status: In Progress → Fix Released
Revision history for this message
Martin Pitt (pitti) wrote :

Edgy should get security update.

http://www.avahi.org/changeset/1353 should also be applied for this.

Changed in avahi:
assignee: nobody → pitti
importance: Undecided → High
status: Unconfirmed → In Progress
Revision history for this message
Kees Cook (kees) wrote :

Published with USN-402-1.

Changed in avahi:
assignee: pitti → keescook
status: In Progress → Fix Released
status: Unconfirmed → Fix Released
assignee: nobody → keescook
assignee: nobody → keescook
importance: Undecided → High
status: Unconfirmed → Fix Released
importance: Undecided → High
Changed in avahi:
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.