Lucene search
+L

4 matches found

Cvelist
Cvelist
added 2026/09/18 5:26 p.m.38 views

CVE-2026-69184 c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...

7.5CVSS0.00675EPSS
SaveExploits0References6
Rows per page
Query Builder