CVE-2017-15650

musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict the number of addresses, and thus an attacker can provide an unexpected number by sending A records in a reply to an AAAA query.

• CWE-119

• http://git.musl-libc.org/cgit/musl/commit/?id=45ca5d3fcb6f874bf5ba55d0e9651cef68515395Vendor Advisory
• http://git.musl-libc.org/cgit/musl/tree/WHATSNEWVendor Advisory
• http://openwall.com/lists/oss-security/2017/10/19/5Mailing List, Mitigation, Third Party Advisory
• http://git.musl-libc.org/cgit/musl/commit/?id=45ca5d3fcb6f874bf5ba55d0e9651cef68515395Vendor Advisory
• http://git.musl-libc.org/cgit/musl/tree/WHATSNEWVendor Advisory
• http://openwall.com/lists/oss-security/2017/10/19/5Mailing List, Mitigation, Third Party Advisory

Published

Oct 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15645CSRF exists in Webmin 1.850. By sending a GET request to at/…
• CVE-2017-15646Webmin before 1.860 has XSS with resultant remote code execu…
• CVE-2017-15647On FiberHome routers, Directory Traversal exists in /cgi-bin…
• CVE-2017-15648In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XS…
• CVE-2017-15649net/packet/af_packet.c in the Linux kernel before 4.13.6 all…
• CVE-2017-1565IBM Rational Quality Manager and IBM Rational Collaborative …5.4
• CVE-2017-15651PRTG Network Monitor 17.3.33.2830 allows remote authenticate…
• CVE-2017-15652Artifex Ghostscript 9.22 is affected by: Obtain Information.…
• CVE-2017-15653Improper administrator IP validation after his login in the …
• CVE-2017-15654Highly predictable session tokens in the HTTPd server in all…
• CVE-2017-15655Multiple buffer overflow vulnerabilities exist in the HTTPd …
• CVE-2017-15656Password are stored in plaintext in nvram in the HTTPd serve…