CVE-2017-9454: Resiprocate

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.

Affected products

• Resiprocate Resiprocate: up to and including 1.10.2; version 1.11.0 only; version 1.12.0 only

Published 2017-08-18. Last modified 2026-06-17.