CVE-2017-9445

Name	CVE-2017-9445
Description	In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server can exploit this via a response with a specially crafted TCP payload to trick systemd-resolved into allocating a buffer that's too small, and subsequently write arbitrary data beyond the end of it.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
Debian Bugs	866147

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
systemd (PTS)	buster	241-7~deb10u8	fixed
	buster (security)	241-7~deb10u9	fixed
	bullseye	247.3-7+deb11u2	fixed
	bookworm, sid	252.6-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
systemd	source	wheezy	(not affected)
systemd	source	jessie	(not affected)
systemd	source	stretch	232-25+deb9u1
systemd	source	(unstable)	233-10	866147

Notes

[jessie] - systemd <not-affected> (Vulnerable code not present)
[wheezy] - systemd <not-affected> (Vulnerable code not present)
Introduced by: https://github.com/systemd/systemd/commit/a0166609f782da91710dea9183d1bf138538db37
https://www.openwall.com/lists/oss-security/2017/06/27/8