systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "229-4ubuntu19",
"binary_name": "libnss-myhostname"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "libnss-mymachines"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "libnss-resolve"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "libpam-systemd"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "libsystemd-dev"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "libsystemd0"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "libudev-dev"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "libudev1"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "systemd"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "systemd-container"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "systemd-coredump"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "systemd-journal-remote"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "systemd-sysv"
},
{
"binary_version": "229-4ubuntu19",
"binary_name": "udev"
}
]
}