c-ares kayıtları
c-ares üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-125 Out-of-bounds Read1
- CWE-127 Buffer Under-read1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-416 Use After Free1
- CWE-787 Out-of-bounds Write1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2016-5180Kavram kanıtı | Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of servicc-ares · c-ares · CWE-787 | Kritik9,8 | — | %8,5 | 3 Eki 2016 |
31İzleyin | CVE-2017-1000381İstismar yok | The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the c-ares · c-ares · CWE-200 | Yüksek7,5 | — | %3,3 | 7 Tem 2017 |
23İzleyin | CVE-2020-22217İstismar yok | Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.c-ares · c-ares · CWE-125 | Orta5,9 | — | %0,9 | 22 Ağu 2023 |
23İzleyin | CVE-2025-62408İstismar yok | c-ares has a Use After Free vulnerability when connection is cleaned up after errorc-ares · c-ares · CWE-416 | Orta5,9 | — | %0,4 | 8 Ara 2025 |
22İzleyin | CVE-2024-25629İstismar yok | c-ares out of bounds read in ares__read_line()c-ares · c-ares · CWE-127 | Orta5,5 | — | %0,3 | 23 Şub 2024 |
13İzleyin | CVE-2020-14354İstismar yok | A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing.c-ares · c-ares · CWE-120 | Düşük3,3 | — | %0,5 | 13 May 2021 |
- CVE-2016-518042Planlayın
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of servic
KritikCVSS 9,8Kavram kanıtıEPSS %8c-ares · c-ares3 Eki 2016
- CVE-2017-100038131İzleyin
The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the
YüksekCVSS 7,5İstismar yokEPSS %3c-ares · c-ares7 Tem 2017
- CVE-2020-2221723İzleyin
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
OrtaCVSS 5,9İstismar yokEPSS %0c-ares · c-ares22 Ağu 2023
- CVE-2025-6240823İzleyin
c-ares has a Use After Free vulnerability when connection is cleaned up after error
OrtaCVSS 5,9İstismar yokEPSS %0c-ares · c-ares8 Ara 2025
- CVE-2024-2562922İzleyin
c-ares out of bounds read in ares__read_line()
OrtaCVSS 5,5İstismar yokEPSS %0c-ares · c-ares23 Şub 2024
- CVE-2020-1435413İzleyin
A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing.
DüşükCVSS 3,3İstismar yokEPSS %0c-ares · c-ares13 May 2021