CVE-2017-9104
CVE-2017-9104
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered.
CVSS 9.8 · Critical · EPSS 2.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
adns Debian:12
- Affected ranges
- ECOSYSTEM: < 1.6.0-2
Update to 1.6.0-2
adns Debian:13
- Affected ranges
- ECOSYSTEM: < 1.6.0-2
Update to 1.6.0-2
adns Debian:14
- Affected ranges
- ECOSYSTEM: < 1.6.0-2
Update to 1.6.0-2
adns Ubuntu:16.04:LTS
- Versions
- 1.5.0~rc1-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
adns Ubuntu:18.04:LTS
- Versions
- 1.5.0~rc1-1ubuntu1
- 1.5.0~rc1-1.1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
adns Ubuntu:20.04:LTS
- Versions
- 1.5.1-0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00037.html
- https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html
- http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FLAV7HUESLZR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y32OYFOM5YJ/
- https://nvd.nist.gov/vuln/detail/CVE-2017-9104