Summary
Gzob Qq discovered that c-ares incorrectly handled certain hostnames. A
remote attacker could use this issue to cause applications using c-ares to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | c-ares | 1.10.0-2ubuntu0.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | c-ares | 1.10.0-3ubuntu0.1 |
Vulnerabilities 1
-
Unscored —CVE-2016-5180 Public exploit
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cau…
References
-
report
https://ubuntu.com/security/CVE-2016-5180