Lucene search
OracleLinuxELSA-2024-3842HistoryJun 11, 2024 - 12:00 a.m.
c-ares security update
2024-06-1100:00:00
linux.oracle.com
c-ares
security update
out of bounds read
rhel-26529
ares__read_line
unix
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.6%
[1.19.1-2]
- Resolves: RHEL-26529 - Out of bounds read in ares__read_line() [rhel-9]
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 9 | src | c-ares | < 1.19.1-2.el9_4 | c-ares-1.19.1-2.el9_4.src.rpm |
| oracle linux | 9 | src | c-ares | < 1.19.1-2.el9_4 | c-ares-1.19.1-2.el9_4.src.rpm |
| oracle linux | 9 | src | c-ares | < 1.19.1-2.el9_4 | c-ares-1.19.1-2.el9_4.src.rpm |
| oracle linux | 9 | aarch64 | c-ares | < 1.19.1-2.el9_4 | c-ares-1.19.1-2.el9_4.aarch64.rpm |
| oracle linux | 9 | aarch64 | c-ares | < 1.19.1-2.el9_4 | c-ares-1.19.1-2.el9_4.aarch64.rpm |
| oracle linux | 9 | aarch64 | c-ares-devel | < 1.19.1-2.el9_4 | c-ares-devel-1.19.1-2.el9_4.aarch64.rpm |
| oracle linux | 9 | src | c-ares | < 1.19.1-2.el9_4 | c-ares-1.19.1-2.el9_4.src.rpm |
| oracle linux | 9 | src | c-ares | < 1.19.1-2.el9_4 | c-ares-1.19.1-2.el9_4.src.rpm |
| oracle linux | 9 | src | c-ares | < 1.19.1-2.el9_4 | c-ares-1.19.1-2.el9_4.src.rpm |
| oracle linux | 9 | i686 | c-ares | < 1.19.1-2.el9_4 | c-ares-1.19.1-2.el9_4.i686.rpm |
Related
cvelist
cvelist
CVE-2024-25629 c-ares out of bounds read in ares__read_line()
2024-02-23 14:52:24
cbl_mariner
cbl_mariner
CVE-2024-25629 affecting package fluent-bit for versions less than 2.2.3-1
2024-05-29 00:21:27
CVE-2024-25629 affecting package nodejs18 for versions less than 18.20.2-1
2024-05-06 17:48:02
CVE-2024-25629 affecting package nodejs for versions less than 20.14.0-1
2024-06-21 09:32:44
debiancve
debiancve
CVE-2024-25629
2024-02-23 15:15:09
osv
osv
CVE-2024-25629
2024-02-23 15:15:09
Low: c-ares security update
2024-06-11 00:00:00
c-ares vulnerability
2024-03-06 09:38:49
alpinelinux
alpinelinux
CVE-2024-25629
2024-02-23 15:15:09
nessus
nessus
Fedora 39 : c-ares (2024-835800b552)
2024-04-16 00:00:00
Fedora 40 : c-ares (2024-9963d77dcb)
2024-04-29 00:00:00
RHEL 9 : c-ares (RHSA-2024:3842)
2024-06-12 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1135-1)
2024-05-07 00:00:00
Fedora: Security Advisory for c-ares (FEDORA-2024-835800b552)
2024-05-27 00:00:00
Fedora: Security Advisory for c-ares (FEDORA-2024-d351e7318e)
2024-05-27 00:00:00
cve
cve
CVE-2024-25629
2024-02-23 15:15:09
ibm
ibm
fedora
fedora
[SECURITY] Fedora 38 Update: c-ares-1.28.1-1.fc38
2024-04-16 01:58:45
[SECURITY] Fedora 40 Update: c-ares-1.28.1-1.fc40
2024-04-19 21:40:06
[SECURITY] Fedora 39 Update: c-ares-1.28.1-1.fc39
2024-04-16 02:26:25
almalinux
almalinux
Low: c-ares security update
2024-06-11 00:00:00
Important: nodejs:20 security update
2024-05-15 00:00:00
Important: nodejs:18 security update
2024-05-09 00:00:00
prion
prion
Design/Logic Flaw
2024-02-23 15:15:00
ubuntucve
ubuntucve
CVE-2024-25629
2024-02-23 00:00:00
freebsd
freebsd
dns/c-ares -- malformatted file causes application crash
2024-02-23 00:00:00
amazon
amazon
Medium: c-ares
2024-03-13 20:26:00
redos
redos
ROS-20240410-04
2024-04-10 00:00:00
wolfi
wolfi
CVE-2024-25629 vulnerabilities
2024-06-24 09:08:26
redhatcve
redhatcve
CVE-2024-25629
2024-02-23 19:31:57
nvd
nvd
CVE-2024-25629
2024-02-23 15:15:09
mageia
mageia
Updated c-ares packages fix security vulnerabilitie
2024-02-28 08:47:52
ubuntu
ubuntu
c-ares vulnerability
2024-03-06 00:00:00
cgr
cgr
CVE-2024-25629 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Buffer Under-read
2024-04-11 00:37:09
photon
photon
Moderate Photon OS Security Update - PHSA-2024-5.0-0217
2024-03-01 00:00:00
Moderate Photon OS Security Update - PHSA-2024-3.0-0733
2024-02-29 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0574
2024-02-29 00:00:00
rocky
rocky
nodejs:18 security update
2024-05-09 18:51:51
nodejs:18 security update
2024-05-09 18:50:42
nodejs:20 security update
2024-05-09 18:50:42
redhat
redhat
(RHSA-2024:2778) Important: nodejs:20 security update
2024-05-09 05:32:10
(RHSA-2024:2853) Important: nodejs:20 security update
2024-05-15 10:54:45
(RHSA-2024:2910) Important: nodejs security update
2024-05-20 01:02:30
oraclelinux
oraclelinux
nodejs:18 security update
2024-05-14 00:00:00
nodejs:20 security update
2024-05-09 00:00:00
nodejs security update
2024-05-22 00:00:00
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.6%
Related for ELSA-2024-3842