3 matches found
c-ares security update
1.13.0-9.1 - Resolves: RHEL-11931 - Buffer Underwrite in aresinetnetpton rhel-8.9.0.z 1.13.0-9 - Resolves: rhbz2238293 - CVE-2020-22217 c-ares: read-heap-buffer-overflow in aresparsesoareply rhel-8 rhel-8.9.0.z...
Updated c-ares packages fix security vulnerabilities
Avoid read-heap-buffer-overflow in aresparsesoareply found during fuzzing. Avoid theoretical buffer overflow in RC4 loop comparison. Empty hquery-name could lead to invalid memory access. aresparsea,aaaareply could return a larger naddrttls than was passed in...
PT-2021-30830
Name of the Vulnerable Software and Affected Versions c-ares affected versions not specified Description The issue involves several potential problems, including a read-heap-buffer-overflow in ares parse soa reply discovered through fuzzing, a theoretical buffer overflow in the RC4 loop compariso...