What’s Vulnerable › Vulnerabilities

CVE-2017-9454

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-18 · updated 2026-06-17
• Weakness: CWE-125

Description

Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.

Affected products

• Resiprocate: through 1.10.2; 1.11.0-alpha1, 1.11.0-alpha10, 1.11.0-alpha11, 1.11.0-alpha2, 1.11.0-alpha3, 1.11.0-alpha4 (+20)

References

• https://github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df
• https://list.resiprocate.org/archive/resiprocate-users/msg02700.html
• https://github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df
• https://list.resiprocate.org/archive/resiprocate-users/msg02700.html

Get alerted when CVE-2017-9454 or the next vulnerability affects your stack