UbuntuUpdates.org

Bugs fixes in "c-ares"

Origin Bug number Title Date fixed
CVE CVE-2024-25629 c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc 2024-03-06
CVE CVE-2024-25629 c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc 2024-03-06
CVE CVE-2024-25629 c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc 2024-03-06
CVE CVE-2024-25629 c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc 2024-03-06
CVE CVE-2020-22217 Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. 2023-09-18
CVE CVE-2020-22217 Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. 2023-09-18
CVE CVE-2023-32067 c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malf 2023-06-14
CVE CVE-2023-32067 c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malf 2023-06-14
CVE CVE-2023-32067 c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malf 2023-06-14
CVE CVE-2023-32067 c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malf 2023-06-14
CVE CVE-2021-3672 Missing input validation on hostnames returned by DNS servers 2021-08-10
CVE CVE-2021-3672 Missing input validation on hostnames returned by DNS servers 2021-08-10
CVE CVE-2021-3672 Missing input validation on hostnames returned by DNS servers 2021-08-10
CVE CVE-2021-3672 Missing input validation on hostnames returned by DNS servers 2021-08-10
CVE CVE-2016-5180 Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of 2016-11-30
Launchpad 1629085 CVE-2016-5180: out-of-bounds write in ares_create_query and ares_mkquery 2016-11-30
CVE CVE-2016-5180 Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of 2016-11-30
Launchpad 1629085 CVE-2016-5180: out-of-bounds write in ares_create_query and ares_mkquery 2016-11-30



About   -   Send Feedback to @ubuntu_updates