Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-15908
7.5
HIGHCVSS v3
Published
October 26, 2017
CVSS v2
5 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.
systemd/systemd
GitHubThe systemd System and Service Manager
GitHubThe systemd System and Service Manager = 228, = 229, = 224, = 225, = 223, = 232, = 234, = 230, = 231, = 226, = 227, = 235, = 233NVD
keszybz/systemdGitHubsystemd upstream
GitHubsystemd upstream= 228, = 229, = 224, = 225, = 223, = 232, = 234, = 230, = 231, = 226, = 227, = 235, = 233NVD