Lucene search

K
osvGoogleOSV:RLSA-2023:3559
HistoryJun 13, 2023 - 7:55 p.m.

Important: c-ares security update

2023-06-1319:55:23
Google
osv.dev
7
c-ares library
asynchronous dns
security update
cve-2023-32067
denial of service

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.6%

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

  • c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.