systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section. https://nvd.nist.gov/vuln/detail/CVE-2017-9217
