Home

CVE-2017-9445

Description

In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer thats too small. A malicious DNS server can exploit this via a response with a specially crafted TCP payload to trick systemd-resolved into allocating a buffer thats too small, and subsequently write arbitrary data beyond the end of it.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.695

Associated Vulnerability

VulnerabilityOS Platform
system and service manager (USN-3341-1) systemd_231-9ubuntu5_i386.debLinux
system and service manager (USN-3341-1) systemd_231-9ubuntu5_amd64.debLinux
system and service manager (USN-3341-1) systemd_232-21ubuntu5_i386.debLinux
system and service manager (USN-3341-1) systemd_232-21ubuntu5_amd64.debLinux
SUSE-SU-2017:1898-1(SUSE Linux Enterprise Desktop 12-SP2 ) dracut-044.1-109.8.3.x86_64.rpmLinux
SUSE-SU-2017:1898-1(SUSE Linux Enterprise Desktop 12-SP2 ) dracut-debuginfo-044.1-109.8.3.x86_64.rpmLinux
SUSE-SU-2017:1898-1(SUSE Linux Enterprise Desktop 12-SP2 ) dracut-debugsource-044.1-109.8.3.x86_64.rpmLinux
SUSE-SU-2017:1898-1(SUSE Linux Enterprise Server 12-SP2 ) dracut-fips-044.1-109.8.3.x86_64.rpmLinux
Systemd update (ELSA-2020-0575) systemd-239-18.0.2.el8_1.4.x86_64.rpmLinux
Systemd-container update (ELSA-2020-0575) systemd-container-239-18.0.2.el8_1.4.x86_64.rpmLinux
Systemd-devel update (ELSA-2020-0575) systemd-devel-239-18.0.2.el8_1.4.x86_64.rpmLinux
Systemd-journal-remote update (ELSA-2020-0575) systemd-journal-remote-239-18.0.2.el8_1.4.x86_64.rpmLinux
Systemd-libs update (ELSA-2020-0575) systemd-libs-239-18.0.2.el8_1.4.x86_64.rpmLinux
Systemd-pam update (ELSA-2020-0575) systemd-pam-239-18.0.2.el8_1.4.x86_64.rpmLinux
Systemd-tests update (ELSA-2020-0575) systemd-tests-239-18.0.2.el8_1.4.x86_64.rpmLinux
Systemd-udev update (ELSA-2020-0575) systemd-udev-239-18.0.2.el8_1.4.x86_64.rpmLinux
Systemd update (ELSA-2020-0575) systemd-239-18.0.2.el8_1.4.i686.rpmLinux
Systemd-container update (ELSA-2020-0575) systemd-container-239-18.0.2.el8_1.4.i686.rpmLinux
Systemd-devel update (ELSA-2020-0575) systemd-devel-239-18.0.2.el8_1.4.i686.rpmLinux
Systemd-libs update (ELSA-2020-0575) systemd-libs-239-18.0.2.el8_1.4.i686.rpmLinux
Out-of-bounds Write Vulnerability (CVE-2017-9445)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234