CVE-2017-9104

An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-06-18

Last modified

2024-08-05

Weaknesses

CWE-400

Affected products

• Fedora (Fedoraproject)
• Adns (Gnu)
• Leap (Opensuse)

References

• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00037.html
• http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git
• http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=adns.git%3Ba=blob%3Bf=changelog
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRVHN3GGVNQWAOL3PWC5FL…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGFZ4SPV6KFQK6ZNUZFB5Y…
• https://www.chiark.greenend.org.uk/pipermail/adns-announce/2020/000004.html