CVE-2017-9105: 
Linux Debian vulnerability analysis and mitigation

A vulnerability was discovered in adns before version 1.5.2, identified as CVE-2017-9105. The issue involves pointer corruption that occurs when a nameserver speaks first due to an incorrect number of pointer dereferences. This vulnerability was discovered in 2017 and potentially allows for remote code execution (NVD, MITRE).

The vulnerability stems from a pointer corruption issue in the DNS resolver library when processing responses from nameservers. The bug occurs specifically when a nameserver responds first and involves incorrect handling of pointer dereferences. The issue was discovered using AFL 2.35b fuzzing tool, as confirmed in the security advisory (ADNS Announce).

The vulnerability affects all adns callers and is exploitable through the local recursive resolver. The worst-case scenario is remote code execution, making this a critical security issue. The vulnerability impacts applications that use the adns library for DNS resolution (ADNS Announce, Fedora Update).

The vulnerability is exploitable through the local recursive resolver, potentially leading to remote code execution. The issue was serious enough to warrant immediate patching and was one of several critical vulnerabilities addressed in version 1.5.2 (ADNS Announce).

The vulnerability was fixed in adns version 1.5.2. Users are strongly advised to upgrade to this version or later. The fix was also included in version 1.6.0, which contains additional build fixes and tests. Package maintainers have provided updates through their respective repositories, such as Fedora's update to version 1.6.0 (Fedora Update).