CVE-2017-15908: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 23.6% chance of exploitation in the next 30 days.

In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only
• Systemd Project Systemd: version 223 only; version 224 only; version 225 only; version 226 only; version 227 only; version 228 only; …

Published 2017-10-26. Last modified 2026-06-17.