1323 matches found
EUVD-2025-201830
c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using readanswer and processanswer, which can cause a Denial of Service. This issue is fixed in version 1.34.6...
c-ares -- Use After Free
https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5 reports: c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using readanswer and processanswer, which can cause a Denial of Service. This issue is fixed i...
Linux Distros Unpatched Vulnerability : CVE-2025-62408
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using readanswer and processanswer, whi...
PT-2025-49603
Name of the Vulnerable Software and Affected Versions c-ares versions 1.32.3 through 1.34.5 Description c-ares is an asynchronous resolver library. Versions between 1.32.3 and 1.34.5 improperly handle query termination after maximum attempts when utilizing the read answer and process answer...
c-ares 资源管理错误漏洞
c-ares is a C library for asynchronous DNS requests from the c-ares individual developer. A resource management error vulnerability exists in c-ares versions 1.32.3 through 1.34.5, which stems from the readanswer and processanswer functions terminating a query after the maximum number of attempts...
Security Bulletin: IBM DataPower Gateway vulnerable to a denial of service due to C-Ares
Summary C-Ares is used in IBM DataPower Gateway's DNS resolver Vulnerability Details CVEID:CVE-2025-31498 DESCRIPTION: c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in readanswers when processanswer may re-enqueue a query either due to a DNS...
RockyLinux 9 : nodejs:18 (RLSA-2023:2654)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:2654 advisory. glob-parent: Regular Expression Denial of Service CVE-2021-35065 c-ares: buffer overflow in configsortlist due to missing string length check CVE-2022-49...
Advisory ROSA-SA-2025-3106
Software: c-ares 1.13.0 OS: ROSA Virtualization 2.1 packageevrstring: c-ares-1.13.0-11.rv3 CVE-ID: CVE-2020-22217 BDU-ID: 2023-05898 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the aresparsesoareply function of the C-ares asynchronous DNS query library is related to an operation exceeding...
TencentOS Server 3: c-ares (TSSA-2023:0186)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0186 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
ROS-20251111-08
A vulnerability in the Python module that provides an interface to c-ares pycares is related to an error in the use of memory after release, caused by incorrect handling of callback references when destroying the Channel object. Exploitation of the vulnerability could allow an attacker acting...
EUVD-2005-2426
Malware in sbrugna...
EUVD-2017-18387
Malware in sbrugna...
EUVD-2020-14982
Malware in sbrugna...
EUVD-2020-6498
Malware in sbrugna...
EUVD-2017-1540
Malware in sbrugna...
EUVD-2007-3145
Malware in sbrugna...
EUVD-2007-3144
Malware in sbrugna...
EUVD-2023-35463
Malicious code in bioql PyPI...