CVE-2017-9217
Fixed in a distro release EPSS 15%
systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.
Products: systemd_project systemd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | systemd | 233-7 |
| Debian 12 | systemd | 232-24 |
| Debian 13 | systemd | 232-24 |
| Debian 14 | systemd | 232-24 |
| SUSE Linux Enterprise Desktop 12 SP2 | systemd | 228-149.3 |
| SUSE Linux Enterprise Desktop 12 SP3 | systemd | 228-150.9.3 |
| SUSE Linux Enterprise Server 12 SP2 | systemd | 228-149.3 |
| SUSE Linux Enterprise Server 12 SP3 | systemd | 228-150.9.3 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | systemd | 228-149.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | systemd | 228-149.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | systemd | 228-150.9.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | systemd | 228-149.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | systemd | 228-150.9.3 |
| Ubuntu 16.04 LTS | systemd | 229-4ubuntu19 |