Skip to content
OpenAdvisories

Package · Alpine

c-ares

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-33630

    c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP

    c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup st…

    c-ares c-ares nodejs fluent-bit Debian Ubuntu Azure Linux Alpine
  • High 8.3
    CVE-2025-31498

    c-ares has a use-after-free in read_answers()

    c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue a query either due to a DNS Cookie Failure or when the upstream server does not properly support EDNS, or …

    c-ares c-ares fluent-bit c-ares Debian Azure Linux Alpine