What’s Vulnerable › Vulnerabilities

CVE-2017-9217

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 15.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-05-24 · updated 2026-06-17
• Weakness: CWE-476

Description

systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.

Affected products

• systemd: through 233

References

• http://www.securityfocus.com/bid/98677
• https://github.com/systemd/systemd/commit/a924f43f30f9c4acaf70618dd2a055f8b0f166be
• https://github.com/systemd/systemd/pull/5998
• https://launchpad.net/bugs/1621396
• http://www.securityfocus.com/bid/98677
• https://github.com/systemd/systemd/commit/a924f43f30f9c4acaf70618dd2a055f8b0f166be
• https://github.com/systemd/systemd/pull/5998
• https://launchpad.net/bugs/1621396
• https://security.netapp.com/advisory/ntap-20241213-0003/

Get alerted when CVE-2017-9217 or the next vulnerability affects your stack