Lucene search
HistoryAug 22, 2023 - 7:16 p.m.
CVE-2020-22217
buffer overflow
c-ares
function vulnerability
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
5.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.4%
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
Affected configurations
Node
c-aresc-aresMatch1.16.1
ORc-aresc-aresMatch1.17.0
Node
debiandebian_linuxMatch10.0
Related
debiancve
debiancve
CVE-2020-22217
2023-08-22 19:16:19
redhatcve
redhatcve
CVE-2020-22217
2023-08-30 15:15:33
osv
osv
CVE-2020-22217
2023-08-22 19:16:19
c-ares vulnerability
2023-09-18 13:08:11
c-ares - security update
2023-09-15 00:00:00
nessus
nessus
Debian DLA-3567-1 : c-ares - LTS security update
2023-09-17 00:00:00
RHEL 8 : c-ares (RHSA-2024:0419)
2024-01-25 00:00:00
Ubuntu 20.04 LTS : c-ares vulnerability (USN-6376-1)
2023-09-18 00:00:00
redhat
redhat
(RHSA-2024:0419) Moderate: c-ares security update
2024-01-24 14:40:26
(RHSA-2024:0578) Moderate: c-ares security update
2024-01-30 12:53:21
(RHSA-2023:7207) Moderate: c-ares security update
2023-11-14 16:23:45
openvas
openvas
Debian: Security Advisory (DLA-3567-1)
2023-09-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3690-1)
2023-09-21 00:00:00
Ubuntu: Security Advisory (USN-6376-1)
2023-09-19 00:00:00
cve
cve
CVE-2020-22217
2023-08-22 19:16:19
ubuntucve
ubuntucve
CVE-2020-22217
2023-08-22 00:00:00
debian
debian
[SECURITY] [DLA 3567-1] c-ares security update
2023-09-15 06:39:57
prion
prion
Buffer overflow
2023-08-22 19:16:00
cvelist
cvelist
CVE-2020-22217
2023-08-22 00:00:00
ubuntu
ubuntu
c-ares vulnerability
2023-09-18 00:00:00
cbl_mariner
cbl_mariner
almalinux
almalinux
Moderate: c-ares security update
2023-11-14 00:00:00
rocky
rocky
c-ares security update
2023-11-28 22:42:52
oraclelinux
oraclelinux
c-ares security update
2023-11-22 00:00:00
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
5.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.4%
Related for NVD:CVE-2020-22217