Known vulnerabilities in c-ares

Software: c-ares
Software CPE: cpe:2.3:a:c-ares_haxx_se:c-ares:*:*:*:*:*:*:*:*
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting c-ares c-ares is affected by 17 known vulnerabilities: 2 high, 11 medium, 4 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137036 - Use After Free
CVE-2026-33630
CWE-416 Medium
No
No
1.34.7 07.07.2026 SB2026070774
SB2026070776
SB2026070777
and 1 more
#VU137035 - Resource exhaustion
CWE-400 Medium
No
No
1.34.7 07.07.2026 SB2026070774
#VU137034 - Inefficient Algorithmic Complexity
CWE-407 Medium
No
No
1.34.7 07.07.2026 SB2026070774
#VU119383 - Use After Free
CVE-2025-62408
CWE-416 Medium
No
No
1.34.6 08.12.2025 SB20251208136
SB2025121313
SB2025121888
and 2 more
#VU107155 - Use After Free
CVE-2025-31498
CWE-416 High
No
No
1.34.5 08.04.2025 SB2025040846
SB2025040925
SB2025040926
and 18 more
#VU86807 - Out-of-bounds read
CVE-2024-25629
CWE-125 Low
No
No
1.27.0 26.02.2024 SB2024022648
SB2024030621
SB2024032954
and 38 more
#VU83485 - Out-of-bounds read
CVE-2020-22217
CWE-125 Medium
No
No
1.17.0 24.11.2023 SB2023112465
SB2023112471
SB2023121205
and 9 more
#VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31147
CWE-338 Medium
No
No
1.19.1 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 39 more
#VU76425 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-31130
CWE-124 Low
No
No
1.19.1 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 55 more
#VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31124
CWE-338 Medium
No
No
1.19.1 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 33 more
#VU76422 - Improper input validation
CVE-2023-32067
CWE-20 Medium
No
No
1.19.1 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more
#VU72557 - Memory corruption
CVE-2022-4904
CWE-119 Low
No
No
1.19.0 24.02.2023 SB2023022410
SB2023022502
SB2023030233
and 38 more
#VU56970 - Use of Insufficiently Random Values
CVE-2007-3153
CWE-330 Medium
No
No
1.4.0 30.09.2021 SB2007061201
#VU56969 - Use of Insufficiently Random Values
CVE-2007-3152
CWE-330 Medium
No
No
1.4.0 30.09.2021 SB2007061201
#VU56968 - Use After Free
CVE-2020-14354
CWE-416 Low
No
No
1.16.1 30.09.2021 SB2021051322
SB2020120325
SB2020120326
and 1 more
#VU56967 - Improper input validation
CVE-2021-3672
CWE-20 Medium
No
No
1.17.2 30.09.2021 SB2021093017
SB2021110508
SB2022031104
and 39 more
#VU32075 - Heap-based Buffer Overflow
CVE-2016-5180
CWE-122 High
No
No
1.12.0 03.10.2016 SB2016100304
SB2016101851
SB2016093009
and 12 more