Summary
[1.13.0-8]
- Resolves: rhbz#2209517 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.9.0]
[1.13.0-7]
- Resolves: rhbz#2170867 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-8]
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | c-ares | 0:1.13.0-8.el8 |
| Oracle Linux · 8 | c-ares-devel | 0:1.13.0-8.el8 |
Vulnerabilities 1
-
High 8.6
A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string,…