c-ares

1 Product 5 CVEs

CVE Severity Distribution (All Time)

Critical

High

Medium

Low

Timeline Overview

Last 30 Days 0 CVEs

Last 6 Months 0 CVEs

Last Year 0 CVEs

Products

View all

c-ares

3 Versions 5 CVEs

Recent CVEs

CVE-2024-25629 MEDIUM 1 year, 9 months ago

c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc…

CVE-2023-32067 HIGH 2 years, 5 months ago

c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malf…

CVE-2023-31147 MEDIUM 2 years, 5 months ago

c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom() are unavailable, c-ares uses rand() to generate random numbers used f…

CVE-2023-31130 MEDIUM 2 years, 5 months ago

c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00…

CVE-2023-31124 LOW 2 years, 5 months ago

c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARES_RANDOM_FILE will not be set, as s…