Lucene search
OracleLinuxELSA-2024-4249HistoryJul 02, 2024 - 12:00 a.m.
c-ares security update
2024-07-0200:00:00
linux.oracle.com
37
c-ares rhel-26525 unix
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
Low
[1.13.0-11]
- Resolves: RHEL-26525 - c-ares: Out of bounds read in ares__read_line() [rhel-8]
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | c-ares | < 1.13.0-11.el8_10 | c-ares-1.13.0-11.el8_10.src.rpm |
| oracle linux | 8 | src | c-ares | < 1.13.0-11.el8_10 | c-ares-1.13.0-11.el8_10.src.rpm |
| oracle linux | 8 | aarch64 | c-ares | < 1.13.0-11.el8_10 | c-ares-1.13.0-11.el8_10.aarch64.rpm |
| oracle linux | 8 | aarch64 | c-ares | < 1.13.0-11.el8_10 | c-ares-1.13.0-11.el8_10.aarch64.rpm |
| oracle linux | 8 | aarch64 | c-ares-devel | < 1.13.0-11.el8_10 | c-ares-devel-1.13.0-11.el8_10.aarch64.rpm |
| oracle linux | 8 | aarch64 | c-ares-devel | < 1.13.0-11.el8_10 | c-ares-devel-1.13.0-11.el8_10.aarch64.rpm |
| oracle linux | 8 | src | c-ares | < 1.13.0-11.el8_10 | c-ares-1.13.0-11.el8_10.src.rpm |
| oracle linux | 8 | src | c-ares | < 1.13.0-11.el8_10 | c-ares-1.13.0-11.el8_10.src.rpm |
| oracle linux | 8 | i686 | c-ares | < 1.13.0-11.el8_10 | c-ares-1.13.0-11.el8_10.i686.rpm |
| oracle linux | 8 | i686 | c-ares | < 1.13.0-11.el8_10 | c-ares-1.13.0-11.el8_10.i686.rpm |
Related
nvd
nvd
CVE-2024-25629
2024-02-23 15:15:09
nessus
nessus
AlmaLinux 8 : c-ares (ALSA-2024:4249)
2024-07-03 00:00:00
Oracle Linux 8 : c-ares (ELSA-2024-4249)
2024-07-03 00:00:00
EulerOS 2.0 SP8 : c-ares (EulerOS-SA-2024-2020)
2024-07-22 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: c-ares-1.28.1-1.fc40
2024-04-19 21:40:06
[SECURITY] Fedora 39 Update: c-ares-1.28.1-1.fc39
2024-04-16 02:26:25
[SECURITY] Fedora 38 Update: c-ares-1.28.1-1.fc38
2024-04-16 01:58:45
redhatcve
redhatcve
CVE-2024-25629
2024-02-23 19:31:57
mageia
mageia
Updated c-ares packages fix security vulnerabilitie
2024-02-28 08:47:52
cgr
cgr
CVE-2024-25629 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Buffer Under-read
2024-04-11 00:37:09
osv
osv
Low: c-ares security update
2024-07-02 00:00:00
Low: c-ares security update
2024-06-11 00:00:00
c-ares vulnerability
2024-03-06 09:38:49
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-9963d77dcb)
2024-05-27 00:00:00
Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2024-2020)
2024-07-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1135-1)
2024-05-07 00:00:00
ubuntu
ubuntu
c-ares vulnerability
2024-03-06 00:00:00
redhat
redhat
(RHSA-2024:4249) Low: c-ares security update
2024-07-02 13:56:20
(RHSA-2024:3842) Low: c-ares security update
2024-06-11 18:28:01
(RHSA-2024:4721) Moderate: nodejs security update
2024-07-23 08:25:08
vulnrichment
vulnrichment
CVE-2024-25629 c-ares out of bounds read in ares__read_line()
2024-02-23 14:52:24
almalinux
almalinux
Low: c-ares security update
2024-06-11 00:00:00
Low: c-ares security update
2024-07-02 00:00:00
Important: nodejs:20 security update
2024-05-09 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-25629 affecting package fluent-bit for versions less than 2.2.3-1
2024-05-29 00:21:27
CVE-2024-25629 affecting package nodejs18 for versions less than 18.20.2-1
2024-05-06 17:48:02
CVE-2024-25629 affecting package nodejs for versions less than 20.14.0-1
2024-06-21 09:32:44
alpinelinux
alpinelinux
CVE-2024-25629
2024-02-23 15:15:09
debiancve
debiancve
CVE-2024-25629
2024-02-23 15:15:09
ibm
ibm
Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to C-ares (CVE-2024-25629)
2024-05-09 12:34:25
Security Bulletin: IBM Storage Ceph is vulnerable to Buffer Under-read in the RHEL UBI (CVE-2024-25629)
2024-08-05 20:22:03
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-09-18 10:14:03
cvelist
cvelist
CVE-2024-25629 c-ares out of bounds read in ares__read_line()
2024-02-23 14:52:24
f5
f5
K000141051: c-ares vulnerability CVE-2024-25629
2024-09-12 00:00:00
oraclelinux
oraclelinux
c-ares security update
2024-06-11 00:00:00
nodejs:18 security update
2024-05-10 00:00:00
nodejs:20 security update
2024-05-16 00:00:00
cve
cve
CVE-2024-25629
2024-02-23 15:15:09
prion
prion
Design/Logic Flaw
2024-02-23 15:15:00
freebsd
freebsd
dns/c-ares -- malformatted file causes application crash
2024-02-23 00:00:00
redos
redos
ROS-20240410-04
2024-04-10 00:00:00
ubuntucve
ubuntucve
CVE-2024-25629
2024-02-23 00:00:00
amazon
amazon
Medium: c-ares
2024-03-13 20:26:00
wolfi
wolfi
CVE-2024-25629 vulnerabilities
2024-09-19 09:11:50
photon
photon
Moderate Photon OS Security Update - PHSA-2024-3.0-0733
2024-02-29 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0217
2024-03-01 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0574
2024-02-29 00:00:00
rocky
rocky
nodejs:18 security update
2024-05-09 18:51:51
nodejs:18 security update
2024-05-09 18:50:42
nodejs:20 security update
2024-06-14 14:00:40
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
Low
Related for ELSA-2024-4249