Denial of Service Vulnerability in systemd-resolved by systemd
CVE-2017-9217

7.5HIGH

Key Information:

Vendor: Systemd Project
Status: Systemd
Vendor: CVE Published:; 24 May 2017

🔔 Create Systemd Project Vulnerability Alert

What is CVE-2017-9217?

The systemd-resolved component in versions prior to 233 of systemd is vulnerable to a denial of service attack, allowing remote attackers to crash the daemon. This can be achieved through specially crafted DNS responses that include an empty question section, leading to unexpected behavior and destabilization of DNS resolution services. Addressing this vulnerability requires the implementation of patches and updates provided by the vendor.