Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-31130HistoryMay 25, 2023 - 10:15 p.m.
CVE-2023-31130
2023-05-2522:15:09
Debian Security Bug Tracker
security-tracker.debian.org
16
c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular “0::00:00:00/2” was found to cause an issue. C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | c-ares | < 1.18.1-3 | c-ares_1.18.1-3_all.deb |
| Debian | 11 | all | c-ares | < 1.17.1-1+deb11u3 | c-ares_1.17.1-1+deb11u3_all.deb |
| Debian | 10 | all | c-ares | < 1.14.0-1+deb10u3 | c-ares_1.14.0-1+deb10u3_all.deb |
| Debian | 999 | all | c-ares | < 1.18.1-3 | c-ares_1.18.1-3_all.deb |
| Debian | 13 | all | c-ares | < 1.18.1-3 | c-ares_1.18.1-3_all.deb |
Related
prion
prion
Buffer overflow
2023-05-25 22:15:00
cbl_mariner
cbl_mariner
CVE-2023-31130 affecting package nodejs18 for versions less than 18.17.1-2
2023-09-27 18:02:50
CVE-2023-31130 affecting package c-ares 1.19.0-1
2023-06-27 21:25:25
CVE-2023-31130 affecting package fluent-bit for versions less than 2.1.10-1
2023-11-08 02:07:28
redhat
redhat
(RHSA-2023:7392) Moderate: c-ares security update
2023-11-21 09:47:03
(RHSA-2023:7543) Moderate: c-ares security update
2023-11-28 14:46:18
(RHSA-2023:7207) Moderate: c-ares security update
2023-11-14 16:23:45
nessus
nessus
RHEL 8 : c-ares (RHSA-2023:7392)
2023-11-21 00:00:00
Debian DSA-5419-1 : c-ares - security update
2023-06-07 00:00:00
RHEL 8 : c-ares (RHSA-2023:7543)
2024-01-26 00:00:00
cve
cve
CVE-2023-31130
2023-05-25 22:15:09
redhatcve
redhatcve
CVE-2023-31130
2023-05-24 04:11:24
wolfi
wolfi
CVE-2023-31130 vulnerabilities
2024-05-23 03:07:23
f5
f5
K000138586 : Node.js c-areas vulnerability CVE-2023-31130
2024-02-13 00:00:00
cvelist
cvelist
CVE-2023-31130 Buffer Underwrite in ares_inet_net_pton()
2023-05-25 21:45:42
cgr
cgr
CVE-2023-31130 vulnerabilities
2024-05-19 03:07:16
gitlab
gitlab
Buffer Underwrite ('Buffer Underflow')
2023-05-25 00:00:00
osv
osv
CVE-2023-31130
2023-05-25 22:15:09
c-ares vulnerabilities
2023-09-11 15:51:51
c-ares - security update
2023-06-07 00:00:00
ubuntucve
ubuntucve
CVE-2023-31130
2023-05-25 00:00:00
redos
redos
ROS-20240404-02
2024-04-04 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2023-2676)
2023-09-05 00:00:00
Ubuntu: Security Advisory (USN-6164-2)
2023-09-12 00:00:00
Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2023-2634)
2023-09-05 00:00:00
ubuntu
ubuntu
c-ares vulnerabilities
2023-09-11 00:00:00
c-ares vulnerabilities
2023-06-14 00:00:00
debian
debian
[SECURITY] [DLA 3471-1] c-ares security update
2023-06-26 19:47:55
[SECURITY] [DSA 5419-1] c-ares security update
2023-06-07 05:13:03
almalinux
almalinux
Moderate: c-ares security update
2023-11-14 00:00:00
Important: nodejs:18 security update
2023-06-14 00:00:00
Important: nodejs:16 security update
2023-07-12 00:00:00
rocky
rocky
c-ares security update
2023-11-28 22:42:52
nodejs:16 security update
2023-08-31 16:54:34
nodejs:18 security update
2023-06-24 18:53:41
oraclelinux
oraclelinux
c-ares security update
2023-11-22 00:00:00
18 security update
2023-06-15 00:00:00
nodejs:16 security update
2023-07-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2284
2023-10-31 14:04:36
amazon
amazon
Medium: c-ares
2024-01-03 21:04:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps
2023-08-30 14:40:17
fedora
fedora
[SECURITY] Fedora 37 Update: c-ares-1.19.1-1.fc37
2023-05-28 02:57:44
[SECURITY] Fedora 38 Update: c-ares-1.19.1-1.fc38
2023-05-26 01:52:50
slackware
slackware
[slackware-security] c-ares
2023-05-22 19:09:04
gentoo
gentoo
c-ares: Multiple Vulnerabilities
2023-10-08 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0015
2023-05-29 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0084
2023-08-30 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0649
2023-09-14 00:00:00
ics
ics
Siemens SINEC NMS
2024-02-15 12:00:00
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
hp
hp
HP ThinPro 8.0 SP 7 Security Updates
2024-01-26 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47