CVE-2017-15650

Name of the Vulnerable Software and Affected Versions musl libc versions prior to 1.1.17

Description The issue is related to a buffer overflow in the dns parse callback function in network/lookup name.c, which does not restrict the number of addresses. This allows an attacker to provide an unexpected number of addresses by sending A records in a reply to an AAAA query, potentially leading to a denial of service.

Recommendations For musl libc versions prior to 1.1.17, update to version 1.1.17 or later to resolve the issue.