Skip to content
OpenAdvisories

Package · Wolfi

c-ares

5 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    0-byte UDP payload DoS in c-ares

    c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously i…