CVE-2017-9217
High · 7.5CVSS
7.5
EPSS
15.3%
Published
May 24, 2017
CISA due date
—
The record
systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | systemd | 0 | 232-24 |
| Debian:12 | systemd | 0 | 232-24 |
| Debian:13 | systemd | 0 | 232-24 |
| SUSE:Linux Enterprise Desktop 12 SP2 | systemd | 0 | 228-149.3 |
| SUSE:Linux Enterprise Desktop 12 SP3 | systemd | 0 | 228-150.9.3 |
| SUSE:Linux Enterprise Server 12 SP2 | systemd | 0 | 228-149.3 |
| SUSE:Linux Enterprise Server 12 SP3 | systemd | 0 | 228-150.9.3 |
| SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | systemd | 0 | 228-149.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | systemd | 0 | 228-149.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | systemd | 0 | 228-150.9.3 |
| SUSE:Linux Enterprise Software Development Kit 12 SP2 | systemd | 0 | 228-149.3 |
| SUSE:Linux Enterprise Software Development Kit 12 SP3 | systemd | 0 | 228-150.9.3 |
| Ubuntu:14.04:LTS | systemd | 0 | 204-5ubuntu20.24 |
| Ubuntu:16.04:LTS | systemd | 0 | 229-4ubuntu19 |
Related vulnerabilities
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects systemd
- CVE-2019-6454 An issue was discovered in sd-bus in systemd 239. Also affects systemd
- CVE-2017-15908 In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS… Also affects systemd
- CVE-2017-9445 In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can… Also affects systemd
- CVE-2026-112405 Pillow is a Python imaging library. CWE-476
- CVE-2026-112392 Pillow is a Python imaging library. CWE-476
- CVE-2026-100348 kin-openapi is a Go project for handling OpenAPI files. CWE-476
- CVE-2026-100349 kin-openapi is a Go project for handling OpenAPI files. CWE-476