CVE-2010-2244: Avahi

Medium severity, CVSS 4.3. EPSS: 2.3% chance of exploitation in the next 30 days.

The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability than CVE-2008-5081.

Affected products

• Avahi Avahi: version 0.6.16 only; version 0.6.25 only

Published 2010-07-08. Last modified 2026-06-16.