Lucene search

(RHSA-2023:3741) Important: c-ares security update

🗓️ 21 Jun 2023 14:11:48Reported by RedHatType

c-ares C library security update with 0-byte UDP payload DoS fi

Reporter	Title	Published	Views	Family All 199
F5 Networks	K000135831 : Node.js vulnerability CVE-2023-32067	12 Aug 202300:00	–	f5
CBLMariner	CVE-2023-32067 affecting package fluent-bit for versions less than 2.1.10-1	8 Nov 202302:07	–	cbl_mariner
CBLMariner	CVE-2023-32067 affecting package python-gevent for versions less than 21.1.2-3	14 Jan 202422:46	–	cbl_mariner
CBLMariner	CVE-2023-32067 affecting package nodejs for versions less than 16.20.1-2	3 Aug 202302:51	–	cbl_mariner
CBLMariner	CVE-2023-32067 affecting package c-ares for versions less than 1.19.1-1	14 Jun 202323:53	–	cbl_mariner
CBLMariner	CVE-2023-32067 affecting package c-ares 1.19.0-1	27 Jun 202321:25	–	cbl_mariner
CBLMariner	CVE-2023-32067 affecting package grpc for versions less than 1.62.0-2	17 Apr 202422:02	–	cbl_mariner
CBLMariner	CVE-2023-32067 affecting package nodejs18 for versions less than 18.17.1-2	27 Sep 202318:02	–	cbl_mariner
Tenable Nessus	EulerOS 2.0 SP10 : c-ares (EulerOS-SA-2023-2374)	18 Jul 202300:00	–	nessus
Tenable Nessus	Rocky Linux 8 : c-ares (RLSA-2023:3584)	25 Jun 202300:00	–	nessus

Vulners

Node

redhat c-aresRange≤1.10.0-3.el7_9.1

redhat nodejsRange≤16-8080020230608150024.63b34585

redhat nodejsRange≤18-8080020230607122508.63b34585

redhat c-aresRange≤1.13.0-6.el8_8.2

redhat c-ares-0Range≤1.13.0-5.el8_1.1

redhat c-ares-0Range≤1.13.0-5.el8_2.1

redhat c-ares-0Range≤1.13.0-5.el8_4.2

redhat nodejsRange≤16-8060020230620060944.ad008a3a

redhat c-ares-0Range≤1.13.0-6.el8_6.1

redhat c-aresRange≤1.17.1-5.el9_2.1

redhat nodejsRange≤18-9020020230531092345.rhel9

redhat nodejsRange≤16.19.1-2.el9_2

redhat c-ares-0Range≤1.17.1-5.el9_0.1

redhat nodejs-1Range≤16.18.1-4.el9_0

redhat rh-nodejs14-nodejs-0Range≤14.21.3-4.el7

AND

redhat enterprise_linuxMatch7

redhat enterprise_linuxMatch8

redhat enterprise_linuxMatch9

OS	OS Version	Architecture	Package	Package Version	Filename
RedHat	7	ppc	c-ares-devel	1.10.0-3.el7_9.1	c-ares-devel-1.10.0-3.el7_9.1.ppc.rpm
RedHat	7	ppc	c-ares-debuginfo	1.10.0-3.el7_9.1	c-ares-debuginfo-1.10.0-3.el7_9.1.ppc.rpm
RedHat	7	x86_64	c-ares-devel	1.10.0-3.el7_9.1	c-ares-devel-1.10.0-3.el7_9.1.x86_64.rpm
RedHat	7	s390	c-ares	1.10.0-3.el7_9.1	c-ares-1.10.0-3.el7_9.1.s390.rpm
RedHat	7	ppc64	c-ares-debuginfo	1.10.0-3.el7_9.1	c-ares-debuginfo-1.10.0-3.el7_9.1.ppc64.rpm
RedHat	7	ppc64	c-ares-devel	1.10.0-3.el7_9.1	c-ares-devel-1.10.0-3.el7_9.1.ppc64.rpm
RedHat	7	ppc64le	c-ares-debuginfo	1.10.0-3.el7_9.1	c-ares-debuginfo-1.10.0-3.el7_9.1.ppc64le.rpm
RedHat	7	s390x	c-ares-debuginfo	1.10.0-3.el7_9.1	c-ares-debuginfo-1.10.0-3.el7_9.1.s390x.rpm
RedHat	7	x86_64	c-ares-debuginfo	1.10.0-3.el7_9.1	c-ares-debuginfo-1.10.0-3.el7_9.1.x86_64.rpm
RedHat	7	s390x	c-ares	1.10.0-3.el7_9.1	c-ares-1.10.0-3.el7_9.1.s390x.rpm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Jun 2023 14:48Current

6.9Medium risk

Vulners AI Score6.9

CVSS37.5

EPSS0.002

CWE-400