High
Security advisory
systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-9217
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:04 UTC · Revision 1
Source evidence
systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.
osv:CVE-2017-9217
Complete source record
{
"id": "038e82cd557c162bb8a99492a61481f52f908b98f518ced9374c2468cc30f65c",
"url": "https://osv.dev/vulnerability/CVE-2017-9217",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-9217",
"summary": "systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.",
"evidence": "osv:CVE-2017-9217",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-9217",
"aliases": [
"CVE-2017-9217"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/systemd/systemd",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "d60c527009133a1ed3d69c14b8c837c790e78d10"
},
{
"fixed": "a924f43f30f9c4acaf70618dd2a055f8b0f166be"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "233"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "a924f43f30f9c4acaf70618dd2a055f8b0f166be"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"v233",
"v232",
"v231",
"v230",
"v229",
"v228",
"v227",
"v226",
"v225",
"v224",
"v223",
"v222",
"v221",
"v219",
"v220",
"v218",
"v217",
"v216",
"v215",
"v214",
"v213",
"v212",
"v211",
"v210",
"v209",
"v208",
"v207",
"v206",
"v205",
"v204",
"v203",
"v202",
"v201",
"v200",
"v199",
"v198",
"v197",
"v196",
"v195",
"v194",
"v193",
"v192",
"v191",
"v190",
"v189",
"v188",
"v187",
"v186",
"v185",
"v184",
"v183",
"v44",
"v43",
"v42",
"v41",
"v40",
"v39",
"v38",
"v37",
"v36",
"v35",
"v34",
"v33",
"v32",
"v31",
"v30",
"v29",
"v28",
"v27",
"v26",
"v25",
"v24",
"v23",
"v22",
"v21",
"v20",
"v19",
"v18",
"v17",
"v16",
"v15",
"v14",
"v13",
"v12",
"v11",
"v10",
"v9",
"v8",
"v7",
"v6",
"v5",
"v4",
"v3",
"v2",
"v1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9217.json",
"vanir_signatures": [
{
"id": "CVE-2017-9217-73b0e95b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"271159967483008844882920999565096995717",
"45454489445256345147963977968913982856",
"230245785695975270983349848465728071677"
]
},
"source": "https://github.com/systemd/systemd/commit/a924f43f30f9c4acaf70618dd2a055f8b0f166be",
"target": {
"file": "src/resolve/resolved-dns-packet.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2017-9217-7ccf451d",
"digest": {
"length": 322,
"function_hash": "146998496955851844362737428613817786473"
},
"source": "https://github.com/systemd/systemd/commit/a924f43f30f9c4acaf70618dd2a055f8b0f166be",
"target": {
"file": "src/resolve/resolved-dns-packet.c",
"function": "dns_packet_is_reply_for"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:05:38Z"
}
},
{
"ranges": [
{
"repo": "https://github.com/systemd/systemd-stable",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "d60c527009133a1ed3d69c14b8c837c790e78d10"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "233"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v233",
"v232",
"v231",
"v230",
"v229",
"v228",
"v227",
"v226",
"v225",
"v224",
"v223",
"v222",
"v221",
"v219",
"v220",
"v218",
"v217",
"v216",
"v215",
"v214",
"v213",
"v212",
"v211",
"v210",
"v208",
"v209",
"v201",
"v204",
"v207",
"v206",
"v205",
"v203",
"v202",
"v200",
"v199",
"v198",
"v197",
"v196",
"systemd-v196",
"v195",
"systemd-v195",
"v194",
"systemd-v194",
"v193",
"systemd-v193",
"v192",
"systemd-v192",
"v191",
"systemd-v191",
"v190",
"systemd-v190",
"v189",
"systemd-v189",
"v188",
"systemd-v188",
"v187",
"systemd-v187",
"v186",
"systemd-v186",
"v185",
"systemd-v185",
"v184",
"systemd-v184",
"v183",
"systemd-v183",
"v44",
"systemd-v44",
"v43",
"systemd-v43",
"v42",
"systemd-v42",
"v41",
"systemd-v41",
"v40",
"systemd-v40",
"v39",
"systemd-v39",
"v38",
"systemd-v38",
"v37",
"systemd-v37",
"v36",
"systemd-v36",
"v35",
"systemd-v35",
"v34",
"systemd-v34",
"v33",
"systemd-v33",
"v32",
"systemd-v32",
"v31",
"systemd-v31",
"v30",
"systemd-v30",
"v29",
"systemd-v29",
"v28",
"systemd-v28",
"v27",
"systemd-v27",
"v26",
"systemd-v26",
"v25",
"systemd-v25",
"v24",
"systemd-v24",
"v23",
"systemd-v23",
"v22",
"systemd-v22",
"v21",
"systemd-v21",
"v20",
"systemd-v20",
"v19",
"systemd-v19",
"v18",
"systemd-v18",
"v17",
"systemd-v17",
"v16",
"systemd-v16",
"v15",
"systemd-v15",
"v14",
"systemd-v14",
"v13",
"systemd-v13",
"v12",
"systemd-v12",
"v11",
"systemd-v11",
"v10",
"systemd-v10",
"v9",
"systemd-v9",
"v8",
"systemd-v8",
"v7",
"systemd-v7",
"v6",
"systemd-v6",
"v5",
"systemd-v5",
"v4",
"systemd-v4",
"v3",
"systemd-v3",
"v2",
"systemd-v2",
"v1",
"systemd-v1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9217.json"
}
}
],
"modified": "2026-10-24T14:05:38.402879831Z",
"provider": "osv",
"references": [
"https://security.netapp.com/advisory/ntap-20241213-0003/",
"https://launchpad.net/bugs/1621396",
"https://github.com/systemd/systemd/commit/a924f43f30f9c4acaf70618dd2a055f8b0f166be",
"https://github.com/systemd/systemd/pull/5998"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2017-9217",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 442990,
"published_at": "2017-05-24T05:29:00.223+00:00"
}