CVE-2017-15908

In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the…

published October 26, 2017

CVSS

—

EPSS

24%

Percentile

97.8

In the wild

Unconfirmed

What it is

In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.23633 · 97.8th percentile
Published: 2017-10-26T14:00Z

EPSS history

Timeline

26 OCT 14:00Z
In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the…
cvelistv5