{"id":"CVE-2017-15908","aliases":["DEBIAN-CVE-2017-15908","EUVD-2017-7327","GHSA-7jr2-6c89-rmhp","MGASA-2018-0058","SUSE-SU-2018:0299-1","UBUNTU-CVE-2017-15908","USN-3558-1","openSUSE-SU-2024:11420-1"],"status":"published","title":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC...","description":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.23633,"percentile":0.97824,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2017-10-26T00:00:00Z","modified":"2026-10-24T10:49:08Z","fixes":[{"ecosystem":"Debian:12","package":"systemd","fixed_in":["235-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"systemd","fixed_in":["235-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"systemd","fixed_in":["235-3"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"systemd","fixed_in":["230-12.2.mga6"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"systemd","fixed_in":["229-4ubuntu21.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"235-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"235-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"235-3"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"230-12.2.mga6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.1"}]}],"versions":["225-1ubuntu9","227-2ubuntu1","227-2ubuntu2","228-1ubuntu2","228-2ubuntu1","228-2ubuntu2","228-3ubuntu1","228-4ubuntu1","228-4ubuntu2","228-5ubuntu1","228-5ubuntu2","228-5ubuntu3","228-6ubuntu1","229-1ubuntu2","229-1ubuntu4","229-2ubuntu1","229-3ubuntu1","229-3ubuntu2","229-4ubuntu1","229-4ubuntu4","229-4ubuntu5","229-4ubuntu6","229-4ubuntu7","229-4ubuntu8","229-4ubuntu10","229-4ubuntu11","229-4ubuntu12","229-4ubuntu13","229-4ubuntu16","229-4ubuntu17","229-4ubuntu19","229-4ubuntu20","229-4ubuntu21"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"204-5ubuntu20.26"}]}],"versions":["204-0ubuntu18","204-0ubuntu19","204-5ubuntu3","204-5ubuntu5","204-5ubuntu6","204-5ubuntu7","204-5ubuntu8","204-5ubuntu9","204-5ubuntu10","204-5ubuntu11","204-5ubuntu13","204-5ubuntu14","204-5ubuntu15","204-5ubuntu16","204-5ubuntu17","204-5ubuntu18","204-5ubuntu19","204-5ubuntu20","204-5ubuntu20.2","204-5ubuntu20.3","204-5ubuntu20.4","204-5ubuntu20.5","204-5ubuntu20.6","204-5ubuntu20.7","204-5ubuntu20.8","204-5ubuntu20.9","204-5ubuntu20.10","204-5ubuntu20.11","204-5ubuntu20.12","204-5ubuntu20.13","204-5ubuntu20.14","204-5ubuntu20.15","204-5ubuntu20.18","204-5ubuntu20.19","204-5ubuntu20.20","204-5ubuntu20.21","204-5ubuntu20.22","204-5ubuntu20.24","204-5ubuntu20.25"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.1"}]}],"versions":["225-1ubuntu9","227-2ubuntu1","227-2ubuntu2","228-1ubuntu2","228-2ubuntu1","228-2ubuntu2","228-3ubuntu1","228-4ubuntu1","228-4ubuntu2","228-5ubuntu1","228-5ubuntu2","228-5ubuntu3","228-6ubuntu1","229-1ubuntu2","229-1ubuntu4","229-2ubuntu1","229-3ubuntu1","229-3ubuntu2","229-4ubuntu1","229-4ubuntu4","229-4ubuntu5","229-4ubuntu6","229-4ubuntu7","229-4ubuntu8","229-4ubuntu10","229-4ubuntu11","229-4ubuntu12","229-4ubuntu13","229-4ubuntu16","229-4ubuntu17","229-4ubuntu19","229-4ubuntu20","229-4ubuntu21"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.4-2.2"}]}],"bundled":19}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"systemd_project","product":"systemd"}],"references":[{"url":"http://www.securitytracker.com/id/1039662","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securityfocus.com/bid/101600","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/systemd/systemd/pull/7184","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://usn.ubuntu.com/3558-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1725351","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15908"},{"url":"https://usn.ubuntu.com/3558-1"},{"url":"https://github.com/advisories/GHSA-7jr2-6c89-rmhp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-15908","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0058.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22294","tags":["report"]},{"url":"https://usn.ubuntu.com/usn/usn-3466-1/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180299-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1048510","tags":["report"]},{"url":"https://bugzilla.suse.com/1065276","tags":["report"]},{"url":"https://bugzilla.suse.com/1066156","tags":["report"]},{"url":"https://bugzilla.suse.com/1068251","tags":["report"]},{"url":"https://bugzilla.suse.com/1070428","tags":["report"]},{"url":"https://bugzilla.suse.com/1071558","tags":["report"]},{"url":"https://bugzilla.suse.com/1074254","tags":["report"]},{"url":"https://bugzilla.suse.com/1075724","tags":["report"]},{"url":"https://bugzilla.suse.com/1076308","tags":["report"]},{"url":"https://bugzilla.suse.com/897422","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1049","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-15908","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3466-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3558-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1049","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-21029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33910","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-15908","description":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.","status":"published","published":"2017-10-26T14:00:00Z","modified":"2024-08-05T20:04:50.415Z","updated_at":"2026-11-02T14:33:14.271248Z"}],"euvd":[{"id":"EUVD-2017-7327","description":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.","status":"published","published":"2017-10-26T14:00:00Z","modified":"2024-08-05T20:04:50Z","updated_at":"2026-11-03T02:23:13.410138Z"}],"ghsa":[{"id":"GHSA-7jr2-6c89-rmhp","title":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC...","description":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.","status":"published","published":"2022-05-13T01:03:32Z","modified":"2025-04-20T03:48:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:01:55.184489Z"}],"nvd":[{"id":"CVE-2017-15908","description":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.","status":"published","published":"2017-10-26T14:29:00.207Z","modified":"2026-06-17T01:08:27.737Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:04:08.01771Z"}],"osv":[{"id":"CVE-2017-15908","description":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.","status":"published","published":"2017-10-26T14:29:00.207Z","modified":"2026-10-24T10:49:08.03674326Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.853379Z"},{"id":"DEBIAN-CVE-2017-15908","description":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.","status":"published","published":"2017-10-26T14:29:00.207Z","modified":"2026-09-01T20:03:44.823816291Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.801885Z"},{"id":"UBUNTU-CVE-2017-15908","description":"In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.","status":"published","published":"2017-10-26T00:00:00Z","modified":"2026-04-22T11:19:21.370361Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.563448Z"},{"id":"MGASA-2018-0058","title":"Updated systemd packages fix security vulnerability","description":"Updated systemd packages fix security vulnerability:\n\nKarim Hossen \u0026 Thomas Imbert and Nelson William Gamazo Sanchez independently\ndiscovered that systemd-resolved incorrectly handled certain DNS responses.\nA remote attacker could possibly use this issue to cause systemd to\ntemporarily stop responding, resulting in a denial of service\n(CVE-2017-15908).\n","status":"published","published":"2018-01-03T18:52:52Z","modified":"2026-04-16T06:23:21.676217495Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:11420-1","title":"libsystemd0-249.4-2.2 on GA media","description":"These are all security issues fixed in the libsystemd0-249.4-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:45:22.858405Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2018:0299-1","title":"Security update for systemd","description":"This update for systemd fixes several issues.\n\nThis security issue was fixed:\n\n- CVE-2018-1049: Prevent race that can lead to DoS when using automounts (bsc#1076308).\n\nThese non-security issues were fixed:\n\n- core: don't choke if a unit another unit triggers vanishes during reload\n- delta: don't ignore PREFIX when the given argument is PREFIX/SUFFIX\n- delta: extend skip logic to work on full directory paths (prefix+suffix) (bsc#1070428)\n- delta: check if a prefix needs to be skipped only once\n- delta: skip symlink paths when split-usr is enabled (#4591)\n- sysctl: use raw file descriptor in sysctl_write (#7753)\n- sd-netlink: don't take possesion of netlink fd from caller on failure (bsc#1074254)\n- Fix the regexp used to detect broken by-id symlinks in /etc/crypttab\n  It was missing the following case: '/dev/disk/by-id/cr_-xxx'.\n- sysctl: disable buffer while writing to /proc (bsc#1071558)\n- Use read_line() and LONG_LINE_MAX to read values configuration files. (bsc#1071558)\n- sysctl: no need to check for eof twice\n- def: add new constant LONG_LINE_MAX\n- fileio: add new helper call read_line() as bounded getline() replacement\n- service: Don't stop unneeded units needed by restarted service (#7526) (bsc#1066156)\n- gpt-auto-generator: fix the handling of the value returned by fstab_has_fstype() in add_swap() (#6280)\n- gpt-auto-generator: disable gpt auto logic for swaps if at least one is defined in fstab (bsc#897422)\n- fstab-util: introduce fstab_has_fstype() helper\n- fstab-generator: ignore root=/dev/nfs (#3591)\n- fstab-generator: don't process root= if it happens to be 'gpt-auto' (#3452)\n- virt: use XENFEAT_dom0 to detect the hardware domain (#6442, #6662) (#7581) (bsc#1048510)\n- analyze: replace --no-man with --man=no in the man page (bsc#1068251)\n- udev: net_setup_link: don't error out when we couldn't apply link config (#7328)\n- Add missing /etc/systemd/network directory\n- Fix parsing of features in detect_vm_xen_dom0 (#7890) (bsc#1048510)\n- sd-bus: use -- when passing arguments to ssh (#6706)\n- systemctl: make sure we terminate the bus connection first, and then close the pager (#3550)\n- sd-bus: bump message queue size (bsc#1075724)\n- tmpfiles: downgrade warning about duplicate line\n","status":"published","published":"2018-01-30T13:37:19Z","modified":"2026-02-04T02:48:08.646979Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3558-1","title":"systemd vulnerabilities","description":"Karim Hossen \u0026 Thomas Imbert and Nelson William Gamazo Sanchez\nindependently discovered that systemd-resolved incorrectly handled certain\nDNS responses. A remote attacker could possibly use this issue to cause\nsystemd to temporarily stop responding, resulting in a denial of service.\nThis issue only affected Ubuntu 16.04 LTS. (CVE-2017-15908)\n\nIt was discovered that systemd incorrectly handled automounted volumes. A\nlocal attacker could possibly use this issue to cause applications to hang,\nresulting in a denial of service. (CVE-2018-1049)\n","status":"published","published":"2018-02-05T18:09:43Z","modified":"2026-04-22T09:44:07.297406Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}