Skip to content
OpenAdvisories

Package · Azure Linux

python-gevent

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.4
    CVE-2024-25629

    c-ares out of bounds read in ares__read_line()

    c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `/etc/hosts` file.…

    c-ares c-ares nodejs nodejs18 Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.9
    CVE-2023-31147

    Insufficient randomness in generation of DNS query IDs in c-ares

    c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom() are unavailable, c-ares uses rand() to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand() so will generate predictable outp…

    c-ares c-ares nodejs nodejs18 Debian Azure Linux Wolfi
  • Medium 4.1
    CVE-2023-31130

    Buffer Underwrite in ares_inet_net_pton()

    c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes wh…

    c-ares c-ares nodejs nodejs18 Debian Ubuntu Azure Linux Wolfi