CVE-2024-25629

Name
CVE-2024-25629
Description
c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `/etc/hosts` file. If any of these configuration files has an embedded `NULL` character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://github.com/c-ares/c-ares/commit/a804c04ddc8245fc8adf0e92368709639125e183
CONFIRM https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48q
security-advisories@github.com https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2P76QYINQNPEHUTEEDOUYIRZ2X6UVZ5K/
security-advisories@github.com https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GX37LFPFQ3T6FFMMFYQTEGIQXXN7F27U/
security-advisories@github.com https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSCMTSPDIE2UHU34TIXQQHZ6JTE3Y3VF/

Match rules

CPE URI Source package Min version Max version
c-ares >= 0 < 1.27.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
c-ares 3.19-main 1.27.0-r0 Carlo Landmeter <clandmeter@alpinelinux.org> fixed
c-ares 3.18-main 1.19.1-r1 Carlo Landmeter <clandmeter@alpinelinux.org> fixed
c-ares 3.17-main 1.19.1-r1 Carlo Landmeter <clandmeter@alpinelinux.org> fixed
c-ares 3.16-main 1.19.1-r1 Carlo Landmeter <clandmeter@alpinelinux.org> fixed