Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| c-ares | fixed | 1.34.7-1 | package | |
| c-ares | no-dsa | trixie | package | |
| c-ares | not-affected | bookworm | package | |
| c-ares | not-affected | bullseye | package |
Примечания
https://www.openwall.com/lists/oss-security/2026/07/06/8
https://github.com/c-ares/c-ares/security/advisories/GHSA-6wfj-rwm7-3542
Fixed by: https://github.com/c-ares/c-ares/commit/1fa3b86a0b8d18fe7b60f3228a01d770feb026bc (main)
Fixed by: https://github.com/c-ares/c-ares/commit/d823199b688052dcdc1646f2ab4cb8c16b1c644a (v1.34.7)
Связанные уязвимости
A flaw was found in c-ares. A use-after-free / double-free vulnerability exists in the query-completion handling path, where a query callback is invoked while the query is still linked in internal lookup structures. A remote attacker can exploit this via ares_getaddrinfo() over TCP by sending crafted DNS responses that force an EDNS-downgrade retry followed by a connection reset, causing the internal completion handler to access freed memory. This leads to memory corruption and a crash (denial of service), with potential for further impact depending on the allocator and build configuration.
