c-ares Latest Vulnerabilities

Latest vulnerabilities published by c-ares

JSON RSS CSV 🔔 Create Alert Trigger

8 April 2025

Use-after-free Vulnerability in c-ares Library by c-ares Team
CVE-2025-31498
C-aresC-ares8.3HIGH

23 February 2024

C-ares Crash Due to NULL Character in Configuration Files
CVE-2024-25629
C-aresC-ares4.4MEDIUM

22 August 2023

Buffer Overflow Vulnerability in c-ares by c-ares
CVE-2020-22217
C-aresC-ares5.9MEDIUM

25 May 2023

0-byte UDP payload DoS in c-ares
CVE-2023-32067
C-aresC-ares7.5HIGH
AutoTools does not set CARES_RANDOM_FILE during cross compilation
CVE-2023-31124
C-aresC-ares3.7LOW
Buffer Underwrite in ares_inet_net_pton()
CVE-2023-31130
C-aresC-ares6.4MEDIUM
Insufficient randomness in generation of DNS query IDs in c-ares
CVE-2023-31147
C-aresC-ares5.9MEDIUM

6 March 2023

Stack Overflow Vulnerability in c-ares Package from Vendor Red Hat
CVE-2022-4904
C-ares ProjectC-ares8.6HIGH

23 November 2021

Input Validation Flaw in c-ares Library Affects Networking Software from Various Vendors
CVE-2021-3672
C-ares ProjectC-ares5.6MEDIUM

13 May 2021

Use-After-Free and Double-Free Vulnerability in c-ares Library by Haxx
CVE-2020-14354
C-aresC-ares3.3LOW

7 July 2017

Memory Exfiltration Vulnerability in c-ares DNS Library by Haxx
CVE-2017-1000381
C-ares ProjectC-ares7.5HIGH

3 October 2016

Heap-Based Buffer Overflow in c-ares Affects Multiple Platforms
CVE-2016-5180
C-ares ProjectC-aresEPSS 22%9.8CRITICAL

No more vulnerabilities to load.