CVE-2017-9445
HIGHsystemd 223-233 - Out-of-bounds Write via DNS Response TCP Payload
Title source: llmDescription
In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server can exploit this via a response with a specially crafted TCP payload to trick systemd-resolved into allocating a buffer that's too small, and subsequently write arbitrary data beyond the end of it.
References (4)
Core 4
Core References
Broken Link x_refsource_confirm
https://launchpad.net/bugs/1695546
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1038806
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/99302
Mailing List, Patch, Third Party Advisory x_refsource_confirm
http://openwall.com/lists/oss-security/2017/06/27/8
Scores
CVSS v3
7.5
EPSS
0.5512
EPSS Percentile
98.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-787
Status
published
Products (1)
systemd_project/systemd
223 - 233
Published
Jun 28, 2017
Tracked Since
Feb 18, 2026