CVE-2017-9108: An issue was discovered in adns before 1.5.2.

Security readout for executives and security teams

adns before 1.5.2 has a flaw in the adnshost tool when reading stdin without a final newline. It may read one byte past its buffer, which could crash the tool or expose that byte. Business urgency depends on whether adnshost is installed and fed untrusted input. Exposure is most likely on systems running adns before 1.5.2 where adnshost is used, especially scripts or services that pass external data into adnshost stdin. The source bundle does not identify broader affected products or CPEs. Treat this as a targeted hygiene issue, not an emergency based on provided evidence. Prioritize patching where adns is installed on servers or automation hosts and where adnshost processes external input. Mitigation focus: Upgrade adns to version 1.5.2 or later where available.; Apply relevant distribution security updates, including Fedora packages where applicable.; Check upstream and vendor guidance for non-Fedora builds..

Prepared

Jun 3, 2026, 11:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.