Количество 26
Количество 26
BDU:2023-07647
Уязвимость функции ares_inet_net_pton() библиотеки асинхронных DNS-запросов C-ares, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
ROS-20240404-02
Множественные уязвимости c-ares
ALT-PU-2023-4134
ALT-PU-2023-4134: package `c-ares` update to version 1.19.1-alt1
ALT-PU-2023-4623
ALT-PU-2023-4623: package `c-ares` update to version 1.19.1-alt1
CVE-2023-31130
c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1.
CVE-2023-31130
c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1.
CVE-2023-31130
c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1.
CVE-2023-31130
Buffer Underwrite in ares_inet_net_pton()
CVE-2023-31130
c-ares is an asynchronous resolver library. ares_inet_net_pton() is vu ...
RLSA-2023:7207
Moderate: c-ares security update
ELSA-2023-7207
ELSA-2023-7207: c-ares security update (MODERATE)
SUSE-SU-2023:2477-1
Security update for libcares2
SUSE-SU-2023:2313-1
Security update for c-ares
RLSA-2023:4034
Important: nodejs:16 security update
RLSA-2023:3577
Important: nodejs:18 security update
ELSA-2023-6635
ELSA-2023-6635: c-ares security, bug fix, and enhancement update (MODERATE)
ELSA-2023-4034
ELSA-2023-4034: nodejs:16 security update (IMPORTANT)
ELSA-2023-3586
ELSA-2023-3586: nodejs security update (IMPORTANT)
ELSA-2023-3577
ELSA-2023-3577: 18 security update (IMPORTANT)
RLSA-2023:4035
Important: nodejs:18 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-07647 Уязвимость функции ares_inet_net_pton() библиотеки асинхронных DNS-запросов C-ares, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 6.4 | 0% Низкий | больше 3 лет назад |
 | ROS-20240404-02 Множественные уязвимости c-ares | CVSS3: 6.4 | больше 2 лет назад | |
 | ALT-PU-2023-4134 ALT-PU-2023-4134: package `c-ares` update to version 1.19.1-alt1 | CVSS3: 7.5 | около 3 лет назад | |
| ALT-PU-2023-4623 ALT-PU-2023-4623: package `c-ares` update to version 1.19.1-alt1 | CVSS3: 8.6 | около 3 лет назад | |
 | CVE-2023-31130 c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1. | CVSS3: 4.1 | 0% Низкий | больше 3 лет назад |
 | CVE-2023-31130 c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1. | CVSS3: 5.7 | 0% Низкий | больше 3 лет назад |
| CVE-2023-31130 c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1. | CVSS3: 4.1 | 0% Низкий | больше 3 лет назад |
 | CVE-2023-31130 Buffer Underwrite in ares_inet_net_pton() | CVSS3: 6.4 | 0% Низкий | больше 1 года назад |
| CVE-2023-31130 c-ares is an asynchronous resolver library. ares_inet_net_pton() is vu ... | CVSS3: 4.1 | 0% Низкий | больше 3 лет назад |
 | RLSA-2023:7207 Moderate: c-ares security update | почти 3 года назад | ||
| ELSA-2023-7207 ELSA-2023-7207: c-ares security update (MODERATE) | почти 3 года назад | ||
 | SUSE-SU-2023:2477-1 Security update for libcares2 | больше 3 лет назад | ||
| SUSE-SU-2023:2313-1 Security update for c-ares | больше 3 лет назад | ||
| RLSA-2023:4034 Important: nodejs:16 security update | около 3 лет назад | ||
| RLSA-2023:3577 Important: nodejs:18 security update | больше 3 лет назад | ||
| ELSA-2023-6635 ELSA-2023-6635: c-ares security, bug fix, and enhancement update (MODERATE) | почти 3 года назад | ||
| ELSA-2023-4034 ELSA-2023-4034: nodejs:16 security update (IMPORTANT) | около 3 лет назад | ||
| ELSA-2023-3586 ELSA-2023-3586: nodejs security update (IMPORTANT) | больше 3 лет назад | ||
| ELSA-2023-3577 ELSA-2023-3577: 18 security update (IMPORTANT) | больше 3 лет назад | ||
| RLSA-2023:4035 Important: nodejs:18 security update | около 3 лет назад |
Уязвимостей на страницу