CVE-2017-9454

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-9454

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9454.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-9454

Published

2017-08-18T14:29:00.843Z

Modified

2026-07-08T16:54:29.467943Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

Buffer overflow in the aresparsea_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.

References

Affected packages

Git / github.com/resiprocate/resiprocate

Affected ranges

Type

GIT

Repo

https://github.com/resiprocate/resiprocate

Events

Introduced

Last affected

dd6e415b5abccc6ed78958837e1730ba72733a91

Introduced

d39bddd201cfa85dbf958ccc5cd9b416c4112fee

Last affected

3a3ef70005ca72680ee2c5b0ee83d2ceafcd4a5b

Fixed

d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.2"
        },
        {
            "introduced": "1.11.0-alpha1"
        },
        {
            "last_affected": "1.11.0-alpha1"
        },
        {
            "introduced": "1.11.0-alpha10"
        },
        {
            "last_affected": "1.11.0-alpha10"
        },
        {
            "introduced": "1.11.0-alpha11"
        },
        {
            "last_affected": "1.11.0-alpha11"
        },
        {
            "introduced": "1.11.0-alpha2"
        },
        {
            "last_affected": "1.11.0-alpha2"
        },
        {
            "introduced": "1.11.0-alpha3"
        },
        {
            "last_affected": "1.11.0-alpha3"
        },
        {
            "introduced": "1.11.0-alpha4"
        },
        {
            "last_affected": "1.11.0-alpha4"
        },
        {
            "introduced": "1.11.0-alpha5"
        },
        {
            "last_affected": "1.11.0-alpha5"
        },
        {
            "introduced": "1.11.0-alpha6"
        },
        {
            "last_affected": "1.11.0-alpha6"
        },
        {
            "introduced": "1.11.0-alpha7"
        },
        {
            "last_affected": "1.11.0-alpha7"
        },
        {
            "introduced": "1.11.0-alpha8"
        },
        {
            "last_affected": "1.11.0-alpha8"
        },
        {
            "introduced": "1.11.0-alpha9"
        },
        {
            "last_affected": "1.11.0-alpha9"
        },
        {
            "introduced": "1.11.0-beta1"
        },
        {
            "last_affected": "1.11.0-beta1"
        },
        {
            "introduced": "1.11.0-beta2"
        },
        {
            "last_affected": "1.11.0-beta2"
        },
        {
            "introduced": "1.11.0-beta3"
        },
        {
            "last_affected": "1.11.0-beta3"
        },
        {
            "introduced": "1.11.0-beta4"
        },
        {
            "last_affected": "1.11.0-beta4"
        },
        {
            "introduced": "1.11.0-beta5"
        },
        {
            "last_affected": "1.11.0-beta5"
        },
        {
            "introduced": "1.12.0-alpha1"
        },
        {
            "last_affected": "1.12.0-alpha1"
        },
        {
            "introduced": "1.12.0-beta1"
        },
        {
            "last_affected": "1.12.0-beta1"
        },
        {
            "introduced": "1.12.0-beta2"
        },
        {
            "last_affected": "1.12.0-beta2"
        },
        {
            "introduced": "1.12.0-beta3"
        },
        {
            "last_affected": "1.12.0-beta3"
        },
        {
            "introduced": "1.12.0-beta4"
        },
        {
            "last_affected": "1.12.0-beta4"
        },
        {
            "introduced": "1.12.0-beta5"
        },
        {
            "last_affected": "1.12.0-beta5"
        },
        {
            "introduced": "1.12.0-beta6"
        },
        {
            "last_affected": "1.12.0-beta6"
        },
        {
            "introduced": "1.12.0-beta7"
        },
        {
            "last_affected": "1.12.0-beta7"
        },
        {
            "introduced": "1.12.0-beta8"
        },
        {
            "last_affected": "1.12.0-beta8"
        },
        {
            "introduced": "1.12.0-beta9"
        },
        {
            "last_affected": "1.12.0-beta9"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": [
        "cpe:2.3:a:resiprocate:resiprocate:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha10:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha11:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha2:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha3:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha4:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha5:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha6:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha7:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha8:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha9:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta4:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta5:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.12.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta4:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta5:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta6:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta7:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta8:*:*:*:*:*:*",
        "cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta9:*:*:*:*:*:*"
    ]
}

Affected versions

1.*

1.11.0-alpha1

1.11.0-alpha10

1.11.0-alpha11

1.11.0-alpha2

1.11.0-alpha3

1.11.0-alpha4

1.11.0-alpha5

1.11.0-alpha6

1.11.0-alpha7

1.11.0-alpha8

1.11.0-alpha9

1.11.0-beta1

1.11.0-beta2

1.11.0-beta3

1.11.0-beta4

1.11.0-beta5

1.12.0-alpha1

1.12.0-beta1

1.12.0-beta2

1.12.0-beta3

1.12.0-beta4

1.12.0-beta5

1.12.0-beta6

1.12.0-beta7

1.12.0-beta8

1.12.0-beta9

resiprocate-1.*

resiprocate-1.10.0

resiprocate-1.10.0_alpha3

resiprocate-1.10.0_alpha4

resiprocate-1.10.0_beta1

resiprocate-1.10.0_beta2

resiprocate-1.10.1

resiprocate-1.10.2

resiprocate-1.11.0_alpha1

resiprocate-1.11.0_alpha10

resiprocate-1.11.0_alpha11

resiprocate-1.11.0_alpha2

resiprocate-1.11.0_alpha3

resiprocate-1.11.0_alpha4

resiprocate-1.11.0_alpha5

resiprocate-1.11.0_alpha6

resiprocate-1.11.0_alpha7

resiprocate-1.11.0_alpha8

resiprocate-1.11.0_alpha9

resiprocate-1.11.0_beta1

resiprocate-1.11.0_beta2

resiprocate-1.11.0_beta3

resiprocate-1.12.0_alpha1

resiprocate-1.12.0_beta1

resiprocate-1.12.0_beta5

resiprocate-1.12.0_beta6

resiprocate-1.12.0_beta7

resiprocate-1.12.0_beta8

resiprocate-1.12.0_beta9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9454.json"

vanir_signatures_modified

"2026-07-08T16:54:29Z"

vanir_signatures

[
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "83975094632216789625053670307706002658",
                "163342888634037695417228974811624474963",
                "7880708736320800443043474685626691383",
                "120183715538082298789387575744134177208"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df",
        "target": {
            "file": "rutil/dns/ares/ares_parse_a_reply.c"
        },
        "id": "CVE-2017-9454-1ea22be8"
    },
    {
        "digest": {
            "length": 2448.0,
            "function_hash": "232307844069714445886525754008819579935"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df",
        "target": {
            "file": "rutil/dns/ares/ares_parse_a_reply.c",
            "function": "ares_parse_a_reply"
        },
        "id": "CVE-2017-9454-788724e7"
    }
]