CVE-2017-15908

Name of the Vulnerable Software and Affected Versions systemd versions 223 through 235

Description The issue allows a remote DNS server to respond with a custom crafted DNS NSEC resource record, triggering an infinite loop in the dns packet read type window() function of the 'systemd-resolved' service. This can cause a denial of service (DoS) of the affected service.

Recommendations For versions 223 through 235, as a temporary workaround, consider disabling the dns packet read type window() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.