Siemens Ruggedcom ROX Buffer Over-read (CVE-2020-22217)

Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

c-ares: Heap buffer over read in ares_parse_soa_reply

A heap buffer over-read flaw was found in c-ares via the aresparsesoareply function in aresparsesoareply.c...

C-ares Heap Buffer Overflow DoS

The vulnerability of the aresparsesoareply function in the C-ares library related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

AZL-28597 CVE-2020-22217 affecting package python-gevent for versions less than 21.1.2-1

Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c...

UBUNTU-CVE-2020-22217

Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c...

SUSE CVE-2017-9454

Buffer overflow in the aresparseareply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds-read via a crafted DNS response...

c-ares: ares_parse_{a,aaaa}_reply() insufficient naddrttls validation DoS

A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions 15.2.1, 14.15.1, and 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and...

PT-2020-22324

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided input. Description A heap-buffer-overflow READ 16 crash has been reported. The crash occurs in the ares parse aaaa reply function, as indicated by the crash state in the OSS-Fuzz...

PT-2020-22438

Name of the Vulnerable Software and Affected Versions c-ares affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the ares parse into addrinfo2 function, which is called by ares parse aaaa reply. This function...

PT-2020-22473

Name of the Vulnerable Software and Affected Versions c-ares affected versions not specified Description The issue is related to a heap-double-free crash. Technical details about the crash include the function ares parse soa reply in the file ares-test-fuzz.c. Recommendations At the moment, there...

PT-2020-6913

Name of the Vulnerable Software and Affected Versions c-ares versions 1 16 1 through 1 17 0 Description The issue is related to a buffer overflow vulnerability in the ares parse soa reply function of the c-ares library, which handles asynchronous DNS requests. This vulnerability can be exploited ...

PT-2017-3341

Name of the Vulnerable Software and Affected Versions c-ares affected versions not specified Description The issue is related to the ares parse naptr reply function in the c-ares library, which is used for parsing NAPTR responses. This function could be triggered to read memory outside of the giv...