systemd-resolved 'resolved-dns-packet.c' Denial of Service Vulnerability

Bugtraq ID:	98677
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-9217
Remote:	Yes
Local:	No
Published:	May 24 2017 12:00AM
Updated:	May 24 2017 12:00AM
Credit:	KulykIevgen
Vulnerable:	systemd systemd 233 systemd systemd 229 systemd systemd 228 systemd systemd 214 systemd systemd 213 systemd systemd 209 systemd systemd 208 systemd systemd 207
Not Vulnerable:

systemd-resolved 'resolved-dns-packet.c' Denial of Service Vulnerability

systemd-resolved is prone to a denial-of-service vulnerability.

Attackers may leverage this issue to crash the daemon, resulting in denial-of-service conditions.

systemd-resolved 'resolved-dns-packet.c' Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

systemd-resolved 'resolved-dns-packet.c' Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

systemd-resolved 'resolved-dns-packet.c' Denial of Service Vulnerability

References:

• Bugfix of null pointer p->question dereferencing (systemd)
  
• systemd-resolved crashed with SIGSEGV in dns_packet_is_reply_for() (systemd)
  
• systemd-resolved Homepage (systemd-resolved)