Known vulnerabilities in c-ares (Red Hat package)

Vendor: Red Hat Inc.
Software: c-ares (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:c-ares_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting c-ares (Red Hat package) c-ares (Red Hat package) is affected by 8 known vulnerabilities: 6 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83485 - Out-of-bounds read
CVE-2020-22217		 CWE-125 Medium
No
No
 1.13.0-6.el8_6.3, 1.13.0-6.el8_8.4, 1.13.0-9.el8_9.1 24.11.2023 SB2023112465
SB2023112471
SB2023121205
and 9 more
#VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31147		 CWE-338 Medium
No
No
 1.19.1-1.el9 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 39 more
#VU76425 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-31130		 CWE-124 Low
No
No
 1.13.0-6.el8_8.3, 1.13.0-9.el8_9.1, 1.19.1-1.el9 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 55 more
#VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31124		 CWE-338 Medium
No
No
 1.19.1-1.el9 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 33 more
#VU76423 - Improper input validation
CVE-2023-32067		 CWE-20 Medium
No
No
 1.10.0-3.el7_9.1, 1.13.0-5.el8_1.1, 1.13.0-5.el8_2.1, 1.13.0-5.el8_4.2, 1.13.0-6.el8_6.1, 1.13.0-6.el8_8.2, 1.17.1-5.el9_0.1, 1.17.1-5.el9_2.1 23.05.2023 SB2023052312
SB2023053021
SB2023060711
and 35 more
#VU76422 - Improper input validation
CVE-2023-32067		 CWE-20 Medium
No
No
 1.10.0-3.el7_9.1, 1.13.0-5.el8_1.1, 1.13.0-5.el8_2.1, 1.13.0-5.el8_4.2, 1.13.0-6.el8_6.1, 1.13.0-6.el8_8.2, 1.17.1-5.el9_0.1, 1.17.1-5.el9_2.1 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more
#VU72557 - Memory corruption
CVE-2022-4904		 CWE-119 Low
No
No
 1.13.0-6.el8_8.3, 1.13.0-8.el8, 1.17.1-5.el9_0.2, 1.17.1-5.el9_2.2, 1.19.1-1.el9 24.02.2023 SB2023022410
SB2023022502
SB2023030233
and 38 more
#VU56967 - Improper input validation
CVE-2021-3672		 CWE-20 Medium
No
No
 1.13.0-6.el8 30.09.2021 SB2021093017
SB2021110508
SB2022031104
and 39 more