PT-2017-2373 · Linux+3 · Systemd+3

Chris Coulson · Publicado 2017-06-27 · Atualizado 2024-06-15 · CVE-2017-9445

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions systemd versions through 233

Description The issue is caused by a buffer overflow in the dns packet new function of the systemd-resolved service in the Linux operating system. This can be exploited by a remote attacker who creates a malicious DNS server that sends a response with specially crafted data of a large size, allowing the attacker to crash the system-resolved service and potentially execute arbitrary code.

Recommendations For versions through 233, consider disabling the dns packet new function as a temporary workaround until a patch is available. Restrict access to the system-resolved service to minimize the risk of exploitation. Avoid using the system-resolved service until the issue is resolved.

Correção

Buffer Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-119

CWE-787

Identificadores relacionados

ALT-PU-2017-1893

BDU:2017-01575

CVE-2017-9445

OPENSUSE-SU-2024:11420-1

SUSE-SU-2017:1898-1

SUSE-SU-2017:2031-1

SUSE-SU-2017_1898-1

USN-3341-1

Produtos afetados

Alt Linux

Suse

Ubuntu

Systemd

Referências · 69

• https://suse.com/security/cve/CVE-2018-15686 · Nota
• http://securityfocus.com/bid/99302 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000082 · Nota de Segurança
• https://bugzilla.suse.com/1040153 · Nota
• https://bugzilla.suse.com/1043900 · Nota
• https://suse.com/security/cve/CVE-2018-16864 · Nota
• https://suse.com/security/cve/CVE-2019-3843 · Nota
• https://bugzilla.suse.com/1029516 · Nota
• https://bugzilla.suse.com/1040968 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-9445 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445 · Nota de Segurança
• https://bugzilla.suse.com/1033238 · Nota
• http://openwall.com/lists/oss-security/2017/06/27/8 · Correção
• https://osv.dev/vulnerability/openSUSE-SU-2024:11420-1 · Aviso do Fabricante
• https://lists.suse.com/pipermail/sle-security-updates/2017-July/003039.html · Nota