Out-of-bounds read in c-ares - CVE-2020-22217

Vulnerability identifier: #VU83485

CSH Severity: Medium

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-22217

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition within the ares_parse_soa_reply() function in ares_parse_soa_reply.c. A remote attacker can trigger an out-of-bounds read error and crash the application.

c-ares
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
Red Hat Enterprise Linux for IBM z Systems
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
SUSE Linux Enterprise Workstation Extension 12
Ubuntu
Red Hat Advanced Cluster Security for Kubernetes
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libcares2-debuginfo-32bit
libcares2-32bit
libcares2
libcares2-debuginfo
libcares-devel
libcares2-debugsource
c-ares (Red Hat package)
c-ares-devel
c-ares
libc-ares2 (Ubuntu package)
SmartFabric OS10
Dell EMC NetWorker vProxy

Install updates from vendor's website.

c-ares - update to 1.17.0
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 3.74.8, 4.1.6, 4.3.1
SmartFabric OS10 - update to 10.5.4.11
libcares2-debuginfo-32bit - update to 1.9.1-9.18.1
libcares2-32bit - update to 1.9.1-9.18.1
libcares2 - update to 1.9.1-9.18.1
libcares2-debuginfo - update to 1.9.1-9.18.1
libcares-devel - update to 1.9.1-9.18.1
libcares2-debugsource - update to 1.9.1-9.18.1
c-ares (Red Hat package) - addressed in versions 1.13.0-6.el8_6.3, 1.13.0-6.el8_8.4, 1.13.0-9.el8_9.1
c-ares-devel - update to 1.13.0-9
c-ares - update to 1.13.0-9
libc-ares2 (Ubuntu package) - update to 1.15.0-1ubuntu0.4
Dell EMC NetWorker vProxy - addressed in versions 19.9.0.4, 19.10

• https://github.com/c-ares/c-ares/issues/333
• https://lists.debian.org/debian-lts-announce/2023/09/msg00014.html
• https://github.com/c-ares/c-ares/commit/1b98172b141fe874ad43e679e67506f9b2139043

• Denial of service in c-ares
• Red Hat Enterprise Linux 8 update for c-ares
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.3
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 3.74
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.1
• Red Hat Enterprise Linux 8.6 Extended Update Support update for c-ares
• Dell EMC NetWorker vProxy update for third-party components
• Red Hat Enterprise Linux 8.8 Extended Update Support update for c-ares
• Multiple vulnerabilities in Dell SmartFabric OS10
• SUSE update for libcares2
• Ubuntu update for c-ares
• Anolis OS update for c-ares