CVE-2017-9106 Memory corruption in n/a
A buffer overflow in the adns library allows attackers to execute arbitrary code or cause denial of service via malformed DNS responses.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-9106?
CVE-2017-9106 is a high-severity memory corruption vulnerability in Fedoraproject Fedora, published on 18 Jun 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn't, the buffer may be overrun (depending on the sizes of the types on the current platform). Of course the inputs ought to be right. And there are pointers in there too, so perhaps one could say that the caller ought to check these things. It may be better to require the caller to make the pointer structure right, but to have the code here be defensive about (and tolerate with an error but without crashing) out-of-range integer values. So: it should defend each of these integer conversion sites with a check for the actual permitted range, and return adns_s_invaliddata if not. The lack of this check causes the SOA sign extension bug to be a serious security problem: the sign extended SOA value is out of range, and overruns the buffer when reconverted. This is related to sign extending SOA 32-bit integer fields, and use of a signed data type.
Weakness: CWE-119
Which versions are affected by CVE-2017-9106?
It affects 2 products.
Products include Fedoraproject Fedora, Gnu Adns.
How do I fix CVE-2017-9106?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-9106 being exploited?
There is no known exploitation of CVE-2017-9106 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as DEBIAN-CVE-2017-9106, GHSA-chm6-j4h2-5qc7, UBUNTU-CVE-2017-9106.