5 matches found
c-ares: Fix of 3 CVEs
CVE-2022-4904: fix stack overflow in aressetsortlist due to missing input validation - CVE-2023-32067: fix denial of service via 0-byte UDP payload - CVE-2016-5180: fix heap-based buffer overflow in arescreatequery...
CentOS Linux 7 [TuxCare] Security Update: c-ares / c-ares-devel (CENTOS7:CLSA-2025:1757608893)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1757608893 advisory. - Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service...
DEBIAN-CVE-2016-5180
Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds write or possibly execute arbitrary code via a hostname with an escaped trailing dot...
CVE-2016-5180
Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds write or possibly execute arbitrary code via a hostname with an escaped trailing dot...
CVE-2016-5180: Out-of-bounds Write
Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds write or possibly execute arbitrary code via a hostname with an escaped trailing dot...