{"id":"CVE-2017-9217","aliases":["DEBIAN-CVE-2017-9217","EUVD-2017-18155","GHSA-pv82-vf69-rqqm","SUSE-SU-2017:1773-1","SUSE-SU-2017:2031-1","UBUNTU-CVE-2017-9217"],"status":"published","title":"systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash)...","description":"systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.15896,"percentile":0.96911,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2017-05-24T04:56:00Z","modified":"2026-10-24T14:05:38Z","fixes":[{"ecosystem":"Debian:12","package":"systemd","fixed_in":["232-24"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"systemd","fixed_in":["232-24"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"systemd","fixed_in":["232-24"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"systemd","fixed_in":["228-149.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"systemd","fixed_in":["228-149.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"systemd","fixed_in":["228-149.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"systemd","fixed_in":["228-149.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"systemd","fixed_in":["228-149.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"systemd","fixed_in":["229-4ubuntu19"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"232-24"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"232-24"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"232-24"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-149.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-149.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-149.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-149.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-149.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.9.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.9.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.9.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.9.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu19"}]}],"versions":["225-1ubuntu9","227-2ubuntu1","227-2ubuntu2","228-1ubuntu2","228-2ubuntu1","228-2ubuntu2","228-3ubuntu1","228-4ubuntu1","228-4ubuntu2","228-5ubuntu1","228-5ubuntu2","228-5ubuntu3","228-6ubuntu1","229-1ubuntu2","229-1ubuntu4","229-2ubuntu1","229-3ubuntu1","229-3ubuntu2","229-4ubuntu1","229-4ubuntu4","229-4ubuntu5","229-4ubuntu6","229-4ubuntu7","229-4ubuntu8","229-4ubuntu10","229-4ubuntu11","229-4ubuntu12","229-4ubuntu13","229-4ubuntu16","229-4ubuntu17"]}],"products":[{"vendor":"systemd_project","product":"systemd"}],"references":[{"url":"https://github.com/systemd/systemd/pull/5998","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://launchpad.net/bugs/1621396","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/systemd/systemd/commit/a924f43f30f9c4acaf70618dd2a055f8b0f166be","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://www.securityfocus.com/bid/98677","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20241213-0003/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9217"},{"url":"https://security.netapp.com/advisory/ntap-20241213-0003"},{"url":"https://github.com/advisories/GHSA-pv82-vf69-rqqm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-9217","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171773-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1004995","tags":["report"]},{"url":"https://bugzilla.suse.com/1029102","tags":["report"]},{"url":"https://bugzilla.suse.com/1029516","tags":["report"]},{"url":"https://bugzilla.suse.com/1036873","tags":["report"]},{"url":"https://bugzilla.suse.com/1038865","tags":["report"]},{"url":"https://bugzilla.suse.com/1040258","tags":["report"]},{"url":"https://bugzilla.suse.com/1040614","tags":["report"]},{"url":"https://bugzilla.suse.com/1040942","tags":["report"]},{"url":"https://bugzilla.suse.com/1043758","tags":["report"]},{"url":"https://bugzilla.suse.com/982303","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9217","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172031-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1032029","tags":["report"]},{"url":"https://bugzilla.suse.com/1033238","tags":["report"]},{"url":"https://bugzilla.suse.com/1037120","tags":["report"]},{"url":"https://bugzilla.suse.com/1040153","tags":["report"]},{"url":"https://bugzilla.suse.com/1040968","tags":["report"]},{"url":"https://bugzilla.suse.com/1043900","tags":["report"]},{"url":"https://bugzilla.suse.com/1045290","tags":["report"]},{"url":"https://bugzilla.suse.com/1046750","tags":["report"]},{"url":"https://bugzilla.suse.com/986216","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9445","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-9217","tags":["report"]},{"url":"https://github.com/systemd/systemd/pull/6020","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9217","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-9217","description":"systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.","status":"published","published":"2017-05-24T04:56:00Z","modified":"2024-12-13T13:09:19.18Z","updated_at":"2026-11-02T14:33:13.96587Z"}],"euvd":[{"id":"EUVD-2017-18155","description":"systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.","status":"published","published":"2017-05-24T04:56:00Z","modified":"2024-12-13T13:09:19Z","updated_at":"2026-11-03T00:04:35.519932Z"}],"ghsa":[{"id":"GHSA-pv82-vf69-rqqm","title":"systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash)...","description":"systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.","status":"published","published":"2022-05-13T01:04:11Z","modified":"2024-12-13T15:30:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:59:10.37232Z"}],"nvd":[{"id":"CVE-2017-9217","description":"systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.","status":"published","published":"2017-05-24T05:29:00.223Z","modified":"2026-06-17T01:27:41.633Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:03:49.449157Z"}],"osv":[{"id":"CVE-2017-9217","description":"systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.","status":"published","published":"2017-05-24T05:29:00.223Z","modified":"2026-10-24T14:05:38.402879831Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.868403Z"},{"id":"DEBIAN-CVE-2017-9217","description":"systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.","status":"published","published":"2017-05-24T05:29:00.223Z","modified":"2026-09-01T20:03:51.645865692Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"UBUNTU-CVE-2017-9217","description":"systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.","status":"published","published":"2017-05-24T05:29:00Z","modified":"2026-04-22T11:36:28.509492Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"SUSE-SU-2017:1773-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2017-9217: resolved: Fix null pointer p-\u003equestion dereferencing that could lead to resolved aborting (bsc#1040614)\n\nThe update also fixed several non-security bugs:\n\n- core/mount: Use the '-c' flag to not canonicalize paths when calling /bin/umount\n- automount: Handle expire_tokens when the mount unit changes its state (bsc#1040942)\n- automount: Rework propagation between automount and mount units\n- build: Make sure tmpfiles.d/systemd-remote.conf get installed when necessary\n- build: Fix systemd-journal-upload installation\n- basic: Detect XEN Dom0 as no virtualization (bsc#1036873)\n- virt: Make sure some errors are not ignored\n- fstab-generator: Do not skip Before= ordering for noauto mountpoints\n- fstab-gen: Do not convert device timeout into seconds when initializing JobTimeoutSec\n- core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)\n- fstab-generator: Apply the _netdev option also to device units (bsc#1004995)\n- job: Add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)\n- job: Ensure JobRunningTimeoutSec= survives serialization (bsc#1004995)\n- rules: Export NVMe WWID udev attribute (bsc#1038865)\n- rules: Introduce disk/by-id (model_serial) symbolic links for NVMe drives\n- rules: Add rules for NVMe devices\n- sysusers: Make group shadow support configurable (bsc#1029516)\n- core: When deserializing a unit, fully restore its cgroup state (bsc#1029102)\n- core: Introduce cg_mask_from_string()/cg_mask_to_string()\n- core:execute: Fix handling failures of calling fork() in exec_spawn() (bsc#1040258)\n- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)\n  The database might be missing when upgrading a package which was\n  shipping no sysv init scripts nor unit files (at the time --save was\n  called) but the new version start shipping unit files.\n- Disable group shadow support (bsc#1029516)\n- Only check signature job error if signature job exists (bsc#1043758)\n\n","status":"published","published":"2017-07-04T14:14:16Z","modified":"2026-02-04T04:15:05.249078Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2031-1","title":"Security update for systemd","description":"This update for systemd provides several fixes and enhancements.\n\nSecurity issues fixed:\n\n- CVE-2017-9217: Null pointer dereferencing that could lead to resolved aborting. (bsc#1040614)\n- CVE-2017-9445: Possible out-of-bounds write triggered by a specially crafted TCP payload\n  from a DNS server. (bsc#1045290)\n\nThe update also fixed several non-security bugs:\n\n- core/mount: Use the '-c' flag to not canonicalize paths when calling /bin/umount\n- automount: Handle expire_tokens when the mount unit changes its state (bsc#1040942)\n- automount: Rework propagation between automount and mount units\n- build: Make sure tmpfiles.d/systemd-remote.conf get installed when necessary\n- build: Fix systemd-journal-upload installation\n- basic: Detect XEN Dom0 as no virtualization (bsc#1036873)\n- virt: Make sure some errors are not ignored\n- fstab-generator: Do not skip Before= ordering for noauto mountpoints\n- fstab-gen: Do not convert device timeout into seconds when initializing JobTimeoutSec\n- core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)\n- fstab-generator: Apply the _netdev option also to device units (bsc#1004995)\n- job: Add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)\n- job: Ensure JobRunningTimeoutSec= survives serialization (bsc#1004995)\n- rules: Export NVMe WWID udev attribute (bsc#1038865)\n- rules: Introduce disk/by-id (model_serial) symbolic links for NVMe drives\n- rules: Add rules for NVMe devices\n- sysusers: Make group shadow support configurable (bsc#1029516)\n- core: When deserializing a unit, fully restore its cgroup state (bsc#1029102)\n- core: Introduce cg_mask_from_string()/cg_mask_to_string()\n- core:execute: Fix handling failures of calling fork() in exec_spawn() (bsc#1040258)\n- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)\n  The database might be missing when upgrading a package which was\n  shipping no sysv init scripts nor unit files (at the time --save was\n  called) but the new version start shipping unit files.\n- Disable group shadow support (bsc#1029516)\n- Only check signature job error if signature job exists (bsc#1043758)\n- Automounter issue in combination with NFS volumes (bsc#1040968)\n- Missing symbolic link for SAS device in /dev/disk/by-path (bsc#1040153)\n- Add minimal support for boot.d/* scripts in systemd-sysv-convert (bsc#1046750)\n","status":"published","published":"2017-08-03T08:43:31Z","modified":"2026-02-04T03:54:21.672724Z","updated_at":"2026-11-02T15:53:44.209561Z"}]}}