Known vulnerabilities in c-ares

Vendor: openEuler
Software: c-ares
Software CPE: cpe:2.3:o:openeuler:c-ares:*:*:*:*:*:openeuler:*:*
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting c-ares c-ares is affected by 8 known vulnerabilities: 5 medium, 3 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86807 - Out-of-bounds read
CVE-2024-25629
CWE-125 Low
No
No
1.16.1-9, 1.18.1-8 26.02.2024 SB2024022648
SB2024030621
SB2024032954
and 39 more
#VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31147
CWE-338 Medium
No
No
1.16.1-7, 1.18.1-6, 1.18.1-7 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 39 more
#VU76425 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-31130
CWE-124 Low
No
No
1.16.1-7, 1.18.1-6, 1.18.1-7 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 55 more
#VU76423 - Improper input validation
CVE-2023-32067
CWE-20 Medium
No
No
1.16.1-6, 1.18.1-5, 1.18.1-6 23.05.2023 SB2023052312
SB2023053021
SB2023060711
and 35 more
#VU76422 - Improper input validation
CVE-2023-32067
CWE-20 Medium
No
No
1.16.1-6, 1.18.1-5, 1.18.1-6 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more
#VU72557 - Memory corruption
CVE-2022-4904
CWE-119 Low
No
No
1.16.1-4, 1.18.1-4 24.02.2023 SB2023022410
SB2023022502
SB2023030233
and 39 more
#VU56967 - Improper input validation
CVE-2021-3672
CWE-20 Medium
No
No
1.16.1-3 30.09.2021 SB2021093017
SB2021110508
SB2022031104
and 39 more
#VU48569 - Resource Management Errors
CVE-2020-8277
CWE-399 Medium
Available
No
1.16.1-3 19.11.2020 SB2020112003
SB2020112005
SB2020102133
and 23 more