Buffer overflow in Gnu Adns
CVE-2017-9109
An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was found the first time. when this is fixed, the second answer scan finds the same RRs at the first. Otherwise, adns can be confuse…
Vulnerability class: Buffer Overflow
EPSS: 0.021 (79.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Gnu Adns
- Fedoraproject Fedora — versions 31, 32
- Opensuse Leap — versions 15.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory, Release Notes)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
Frequently asked questions
- What is CVE-2017-9109?
- CVE-2017-9109 is a critical-severity vulnerability in Gnu Adns, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2020-06-18.
- How severe is CVE-2017-9109?
- Critical severity. CVSS v3 base score is 9.8 out of 10.