CVE-2017-9217

High

Published: 24/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

systemd-resolved version 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.

Risk Assessment

Attackers can exploit this vulnerability to disrupt the DNS service, potentially leading to availability issues for systems relying on this service.

Recommendation

It is recommended to update systemd-resolved to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Other vulnerabilities in systemd-resolved

CVE-2023-7008Medium
A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.

Original NVD description (English source)

systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS