CVE-2017-9445
A malicious DNS server can exploit this via a response with a specially crafted TCP payload to trick systemd-resolved into allocating a buffer that's too small, and subsequently write arbitrary data beyond the end of it.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 54.8%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server can exploit this via a response with a specially crafted TCP payload to trick systemd-resolved into allocating a buffer that's too small, and subsequently write arbitrary data beyond the end of it.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 54.84% probability · 99th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- systemd project/systemd
- Source
- cve@mitre.org
EPSS 54.8% since 28 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://openwall.com/lists/oss-security/2017/06/27/8Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/99302Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038806Third Party Advisory, VDB Entry
- https://launchpad.net/bugs/1695546Broken Link
- http://openwall.com/lists/oss-security/2017/06/27/8Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/99302Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038806Third Party Advisory, VDB Entry
- https://launchpad.net/bugs/1695546Broken Link
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.