Lucene search

Improper Input Validation

🗓️ 06 Mar 2023 00:00:00Reported by https://gitlab.com/gitlab-org/security-products/gemnasium-dbType

Improper Input Validation in c-ares package leads to potential stack overflow and denial of servic

Reporter	Title	Published	Views	Family All 184
CBLMariner	CVE-2022-4904 affecting package nodejs 14.21.3-1	12 Jan 202509:15	–	cbl_mariner
CBLMariner	CVE-2022-4904 affecting package grpc 1.42.0-8	12 Jan 202509:15	–	cbl_mariner
CBLMariner	CVE-2022-4904 affecting package nodejs for versions less than 16.20.1-2	3 Aug 202302:51	–	cbl_mariner
CBLMariner	CVE-2022-4904 affecting package grpc for versions less than 1.62.0-2	17 Apr 202422:02	–	cbl_mariner
CBLMariner	CVE-2022-4904 affecting package python-gevent for versions less than 21.1.2-3	14 Jan 202422:46	–	cbl_mariner
CBLMariner	CVE-2022-4904 affecting package c-ares 1.18.1-1	20 Apr 202319:17	–	cbl_mariner
CBLMariner	CVE-2022-4904 affecting package python-gevent 1.3.6-5	12 Jan 202509:15	–	cbl_mariner
CBLMariner	CVE-2022-4904 affecting package c-ares for versions less than 1.19.0-1	16 Apr 202301:03	–	cbl_mariner
CBLMariner	CVE-2022-4904 affecting package rubygem-mini_portile2 2.8.0-1	12 Jan 202509:15	–	cbl_mariner
CBLMariner	CVE-2022-4904 affecting package grpc 1.35.0-9	12 Jan 202509:15	–	cbl_mariner

Vulners

Node

conan c\-aresRange<1.19.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-4904
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/c-ares/c-ares/issues/496
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Mar 2023 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS38.6

EPSS0.001