Showing 1 - 3 of 3

CVE-2024-25629

Status Candidate

Overview

c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `/etc/hosts` file. If any of these configuration files has an embedded `NULL` character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Related Files

Red Hat Security Advisory 2024-4249-03: Posted Jul 3, 2024; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2024-4249-03 - An update for c-ares is now available for Red Hat Enterprise Linux 8. Issues addressed include an out of bounds read vulnerability.; tags | advisory; systems | linux, redhat; advisories | CVE-2024-25629; SHA-256 | 5270b94b180f8e9639705a64bbb7590f7ae832ca8ef7e6111b602be615fed48e; Download | Favorite | View

Red Hat Security Advisory 2024-3842-03: Posted Jun 12, 2024; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2024-3842-03 - An update for c-ares is now available for Red Hat Enterprise Linux 9. Issues addressed include an out of bounds read vulnerability.; tags | advisory; systems | linux, redhat; advisories | CVE-2024-25629; SHA-256 | a5e7749c400384de02569560302160c979c5e2317d1ce11bcb741740ed53dbb4; Download | Favorite | View

Ubuntu Security Notice USN-6676-1: Posted Mar 6, 2024; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 6676-1 - Vojtěch Vobr discovered that c-ares incorrectly handled user input from local configuration files. An attacker could possibly use this issue to cause a denial of service via application crash.; tags | advisory, denial of service, local; systems | linux, ubuntu; advisories | CVE-2024-25629; SHA-256 | dbe62c177736e67d0f34559bcd12eaefa58499419a3ef18ef50db23f6bb5ade7; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 227 files
indoushka 136 files
Jay Turla 111 files
Ubuntu 63 files
Gentoo 33 files
Debian 27 files
sinn3r 23 files
h00die 23 files
Pedro Ribeiro 21 files
juan vazquez 18 files

File Archives

Systems

AIX (429)
Apple (2,104)
BSD (377)
CentOS (58)
Cisco (1,944)
Debian (7,112)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,567)
HPUX (880)
iOS (386)
iPhone (108)
IRIX (220)
Juniper (70)
Linux (50,966)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,661)
Slackware (941)
Solaris (1,614)
SUSE (1,444)
Ubuntu (9,788)
UNIX (9,443)
UnixWare (187)
Windows (6,732)
Other

CVE-2024-25629

Overview

Related Files

File Archive:

August 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems