Vulnerabilities > C Ares > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-02-23 CVE-2024-25629 Out-of-bounds Read vulnerability in multiple products
c-ares is a C library for asynchronous DNS requests.
local
low complexity
c-ares fedoraproject CWE-125
5.5
2023-08-22 CVE-2020-22217 Out-of-bounds Read vulnerability in multiple products
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
network
high complexity
c-ares debian CWE-125
5.9