Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2017-2000

Критический

ALT-PU-2017-2000: package c-ares update to version 1.13.0-alt1.S1

Источник
errata.altlinux.org
Дата публикации
08.08.2017
Дата обновления
08.08.2017
Устраненные уязвимости
3

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades c-ares to version 1.13.0-alt1.S1.

Устраненные уязвимости3

Связанные уязвимости

CVSS3: 9.8
altlinux
почти 8 лет назад

ALT-PU-2018-2653: package `c-ares` update to version 1.15.0-alt1

CVSS3: 9.8
altlinux
больше 2 лет назад

ALT-PU-2016-3244: package `c-ares` update to version 1.11.0-alt1

CVSS3: 7.5
ubuntu
больше 9 лет назад

The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.

CVSS3: 6.5
redhat
больше 9 лет назад

The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.

CVSS3: 7.5
nvd
больше 9 лет назад

The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.