Lucene search

K
redhatRedHatRHSA-2024:0419
HistoryJan 24, 2024 - 2:40 p.m.

(RHSA-2024:0419) Moderate: c-ares security update

2024-01-2414:40:26
access.redhat.com
5
rhsa-2024-0419 c-ares security update asynchronous dns requests domain name system cve-2020-22217 unix buffer over read.

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.4%

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

  • c-ares: Heap buffer over read in ares_parse_soa_reply (CVE-2020-22217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.