Количество 10
Количество 10
CVE-2026-33630
[Unknown description]
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple points in the resend/finish path (timeout handling, response handling, and query dispatch). If the query, or for ares_getaddrinfo() the owning host_query, is freed as a side effect of that callback, it is then accessed and/or freed a second time. This vulnerability is fixed in ver 1.34.7.
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple points in the resend/finish path (timeout handling, response handling, and query dispatch). If the query, or for ares_getaddrinfo() the owning host_query, is freed as a side effect of that callback, it is then accessed and/or freed a second time. This vulnerability is fixed in ver 1.34.7.
CVE-2026-33630
c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34 ...
RLSA-2026:42096
Important: c-ares security update
ELSA-2026-42096
ELSA-2026-42096: c-ares security update (IMPORTANT)
SUSE-SU-2026:3872-1
Security update for libcares2
openSUSE-SU-2026:21721-1
Security update for c-ares
SUSE-SU-2026:4021-1
Security update for c-ares
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-33630 [Unknown description] | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
 | CVE-2026-33630 c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple points in the resend/finish path (timeout handling, response handling, and query dispatch). If the query, or for ares_getaddrinfo() the owning host_query, is freed as a side effect of that callback, it is then accessed and/or freed a second time. This vulnerability is fixed in ver 1.34.7. | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
 | CVE-2026-33630 c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple points in the resend/finish path (timeout handling, response handling, and query dispatch). If the query, or for ares_getaddrinfo() the owning host_query, is freed as a side effect of that callback, it is then accessed and/or freed a second time. This vulnerability is fixed in ver 1.34.7. | CVSS3: 7.5 | 0% Низкий | 11 дней назад |
 | CVE-2026-33630 c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP | 0% Низкий | 6 дней назад | |
| CVE-2026-33630 c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34 ... | CVSS3: 7.5 | 0% Низкий | 11 дней назад |
 | RLSA-2026:42096 Important: c-ares security update | 0% Низкий | около 2 месяцев назад | |
| ELSA-2026-42096 ELSA-2026-42096: c-ares security update (IMPORTANT) | 0% Низкий | около 2 месяцев назад | |
 | SUSE-SU-2026:3872-1 Security update for libcares2 | 17 дней назад | ||
| openSUSE-SU-2026:21721-1 Security update for c-ares | 14 дней назад | ||
| SUSE-SU-2026:4021-1 Security update for c-ares | 8 дней назад |
Уязвимостей на страницу