Buffer overflow in GNU Adns
CVE-2017-9108
An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It is wrong to increment used as well as setting r, since used is incremented according to r, later. Rather one should be doing what read() would have done. Without this fix, adnshost may read and process one byte beyond the buffer, perhaps crashing or perhaps somehow leaking the value of that byte.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.022 (81.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 82nd percentile — 81.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.022 · newest: 0.022 · change: 0.000
Affected products
- GNU Adns
- Fedoraproject Fedora — versions 31, 32
- openSUSE Leap — versions 15.1
Weakness classification (CWE)
References
- www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git (Third Party Advisory)
- www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html (Third Party Advisory, Release Notes)
- www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (vendor-advisory)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (vendor-advisory)
Frequently asked questions
- What is CVE-2017-9108?
- CVE-2017-9108 is a high-severity vulnerability in GNU Adns, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.5/10. Published 2020-06-18.
- How severe is CVE-2017-9108?
- High severity. CVSS v3 base score is 7.5 out of 10.