c-ares: c-ares: Denial of Service via unvalidated DNS header record counts

A flaw was found in c-ares, an asynchronous resolver library. A remote attacker can send a specially crafted DNS response that causes the aresdnsparse function to trust attacker-controlled record counts without validating if the response contains enough bytes for the claimed records. This can lea...