Karim Hossen

**Name of the Vulnerable Software and Affected Versions** systemd versions 223 through 235 **Description** The issue allows a remote DNS server to respond with a custom crafted DNS NSEC resource record, triggering an infinite loop in the `dns packet read type window()` function of the 'systemd-resolved' service. This can cause a denial of service (DoS) of the affected service. **Recommendations** For versions 223 through 235, as a temporary workaround, consider disabling the `dns packet read type window()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.