CVE-2017-9107: 
Linux Debian vulnerability analysis and mitigation

CVE-2017-9107 is a security vulnerability in the adns DNS resolver library affecting applications that use adns_qf_quoteok_query functionality. The vulnerability was discovered in 2017 and involves an out-of-bounds read when a domain ends with a backslash. This issue was fixed in adns version 1.6.0 (Fedora Update).

The vulnerability is characterized by an out-of-bounds read condition that occurs specifically when processing domain names that end with a backslash character. This vulnerability affects the adns_qf_quoteok_query functionality within the adns library (Fedora Update).

The vulnerability primarily affects applications that use adns_qf_quoteok_query functionality. The likely worst-case scenario is a Denial of Service (DoS) through a crash of the adns-using application. The vulnerability is exploitable by sources of query domain names (ADNS Announce).

The vulnerability is exploitable by sources that can control query domain names. It specifically requires the ability to send domain names ending with a backslash to applications using the adns_qf_quoteok_query functionality (ADNS Announce).

The vulnerability was fixed in adns version 1.6.0. Users are advised to upgrade to this version or later to address the security issue. The fix was included along with several other security improvements in the 1.6.0 release (Fedora Update).