{"id":"CVE-2017-15908","details":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.","modified":"2026-10-24T10:49:08.036743260Z","published":"2017-10-26T14:29:00.207Z","related":["SUSE-SU-2018:0299-1","openSUSE-SU-2024:11420-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"],"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"16.04"},{"last_affected":"16.04"}]}],"vendor_product":"canonical:ubuntu_linux"}]},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/101600"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1039662"},{"type":"FIX","url":"https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1725351"},{"type":"FIX","url":"https://github.com/systemd/systemd/pull/7184"},{"type":"FIX","url":"https://usn.ubuntu.com/3558-1/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/systemd/systemd","events":[{"introduced":"39d1a2d05d4cc75c57de2658ceef04caa9928768"},{"last_affected":"c1719d8bc924ed59448616bd748671c5c7a66d93"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:systemd_project:systemd:223:*:*:*:*:*:*:*","range":[{"introduced":"223"},{"last_affected":"223"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:224:*:*:*:*:*:*:*","range":[{"introduced":"224"},{"last_affected":"224"}]},{"range":[{"introduced":"225"},{"last_affected":"225"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:225:*:*:*:*:*:*:*"},{"range":[{"introduced":"226"},{"last_affected":"226"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:226:*:*:*:*:*:*:*"},{"range":[{"introduced":"227"},{"last_affected":"227"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:227:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:228:*:*:*:*:*:*:*","range":[{"introduced":"228"},{"last_affected":"228"}]},{"range":[{"introduced":"229"},{"last_affected":"229"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:229:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:230:*:*:*:*:*:*:*","range":[{"introduced":"230"},{"last_affected":"230"}]},{"range":[{"introduced":"231"},{"last_affected":"231"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:231:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:systemd_project:systemd:232:*:*:*:*:*:*:*","range":[{"introduced":"232"},{"last_affected":"232"}],"source":"CPE_STRING"},{"range":[{"introduced":"233"},{"last_affected":"233"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:233:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:234:*:*:*:*:*:*:*","range":[{"introduced":"234"},{"last_affected":"234"}]},{"range":[{"introduced":"235"},{"last_affected":"235"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:235:*:*:*:*:*:*:*"}]}}],"versions":["223","224","225","226","227","228","229","230","231","232","233","234","235","v235","v234","v233","v232","v231","v230","v229","v228","v227","v226","v225","v224","v223"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15908.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/systemd/systemd-stable","events":[{"introduced":"39d1a2d05d4cc75c57de2658ceef04caa9928768"},{"last_affected":"c1719d8bc924ed59448616bd748671c5c7a66d93"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:systemd_project:systemd:223:*:*:*:*:*:*:*","range":[{"introduced":"223"},{"last_affected":"223"}],"source":"CPE_STRING"},{"range":[{"introduced":"224"},{"last_affected":"224"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:224:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:systemd_project:systemd:225:*:*:*:*:*:*:*","range":[{"introduced":"225"},{"last_affected":"225"}],"source":"CPE_STRING"},{"range":[{"introduced":"226"},{"last_affected":"226"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:226:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:systemd_project:systemd:227:*:*:*:*:*:*:*","range":[{"introduced":"227"},{"last_affected":"227"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:systemd_project:systemd:228:*:*:*:*:*:*:*","range":[{"introduced":"228"},{"last_affected":"228"}],"source":"CPE_STRING"},{"range":[{"introduced":"229"},{"last_affected":"229"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:229:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:systemd_project:systemd:230:*:*:*:*:*:*:*","range":[{"introduced":"230"},{"last_affected":"230"}],"source":"CPE_STRING"},{"range":[{"introduced":"231"},{"last_affected":"231"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:231:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:232:*:*:*:*:*:*:*","range":[{"introduced":"232"},{"last_affected":"232"}]},{"range":[{"introduced":"233"},{"last_affected":"233"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:233:*:*:*:*:*:*:*"},{"range":[{"introduced":"234"},{"last_affected":"234"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:234:*:*:*:*:*:*:*"},{"range":[{"introduced":"235"},{"last_affected":"235"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:235:*:*:*:*:*:*:*"}]}}],"versions":["223","224","225","226","227","228","229","230","231","232","233","234","235","v235","v234","v233","v232","v231","v230","v229","v228","v227","v226","v225","v224","v223"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15908.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}