{"id":"CVE-2017-15908","details":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.","modified":"2026-07-08T05:51:28.115809345Z","published":"2017-10-26T14:29:00.207Z","related":["CGA-89r2-9mg9-cpx7","SUSE-SU-2018:0299-1","openSUSE-SU-2024:11420-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"],"extracted_events":[{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"16.04"},{"last_affected":"16.04"}],"source":"CPE_STRING"}]},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/101600"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1039662"},{"type":"FIX","url":"https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1725351"},{"type":"FIX","url":"https://github.com/systemd/systemd/pull/7184"},{"type":"FIX","url":"https://usn.ubuntu.com/3558-1/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/systemd/systemd","events":[{"introduced":"39d1a2d05d4cc75c57de2658ceef04caa9928768"},{"last_affected":"c1719d8bc924ed59448616bd748671c5c7a66d93"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:systemd_project:systemd:223:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:224:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:225:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:226:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:227:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:228:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:229:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:230:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:231:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:232:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:233:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:234:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:235:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"223"},{"last_affected":"223"},{"introduced":"224"},{"last_affected":"224"},{"introduced":"225"},{"last_affected":"225"},{"introduced":"226"},{"last_affected":"226"},{"introduced":"227"},{"last_affected":"227"},{"introduced":"228"},{"last_affected":"228"},{"introduced":"229"},{"last_affected":"229"},{"introduced":"230"},{"last_affected":"230"},{"introduced":"231"},{"last_affected":"231"},{"introduced":"232"},{"last_affected":"232"},{"introduced":"233"},{"last_affected":"233"},{"introduced":"234"},{"last_affected":"234"},{"introduced":"235"},{"last_affected":"235"}]}}],"versions":["223","224","225","226","227","228","229","230","231","232","233","234","235","v235","v234","v233","v232","v231","v230","v229","v228","v227","v226","v225","v224","v223"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15908.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/systemd/systemd-stable","events":[{"introduced":"39d1a2d05d4cc75c57de2658ceef04caa9928768"},{"last_affected":"c1719d8bc924ed59448616bd748671c5c7a66d93"}],"database_specific":{"cpe":["cpe:2.3:a:systemd_project:systemd:223:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:224:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:225:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:226:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:227:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:228:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:229:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:230:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:231:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:232:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:233:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:234:*:*:*:*:*:*:*","cpe:2.3:a:systemd_project:systemd:235:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"223"},{"last_affected":"223"},{"introduced":"224"},{"last_affected":"224"},{"introduced":"225"},{"last_affected":"225"},{"introduced":"226"},{"last_affected":"226"},{"introduced":"227"},{"last_affected":"227"},{"introduced":"228"},{"last_affected":"228"},{"introduced":"229"},{"last_affected":"229"},{"introduced":"230"},{"last_affected":"230"},{"introduced":"231"},{"last_affected":"231"},{"introduced":"232"},{"last_affected":"232"},{"introduced":"233"},{"last_affected":"233"},{"introduced":"234"},{"last_affected":"234"},{"introduced":"235"},{"last_affected":"235"}],"source":"CPE_STRING"}}],"versions":["223","224","225","226","227","228","229","230","231","232","233","234","235","v235","v234","v233","v232","v231","v230","v229","v228","v227","v226","v225","v224","v223"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15908.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}