Every CVE Search/ Get API key

CVE-2024-25629

c-ares out of bounds read in ares__read_line()

4.4 MediumFix available

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.35%Up 0.3 points since Feb 24, 2024
90%50%10%1%

What each source reports

CVE List Score used 4.4

c-ares out of bounds read in ares__read_line()

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
CVE-2024-25629
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-127
Updated
2026-11-02
EUVDEUVD-2024-22949 4.4

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
EUVD-2024-22949
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
NVD 4.4

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
CVE-2024-25629
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-127, CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2024-25629 5.5

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
ALPINE-CVE-2024-25629
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-34453 5.5

CVE-2024-25629 affecting package c-ares for versions less than 1.19.1-2

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
AZL-34453
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-34455 5.5

CVE-2024-25629 affecting package fluent-bit for versions less than 2.2.3-1

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
AZL-34455
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 47 moreShow less
OSVAZL-34456 5.5

CVE-2024-25629 affecting package grpc for versions less than 1.42.0-9

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
AZL-34456
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-34462 5.5

CVE-2024-25629 affecting package nodejs18 for versions less than 18.20.2-1

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
AZL-34462
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-34463 5.5

CVE-2024-25629 affecting package python-gevent for versions less than 21.1.2-3

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
AZL-34463
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-34578 5.5

CVE-2024-25629 affecting package c-ares for versions less than 1.30.0-1

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
AZL-34578
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-34687 5.5

CVE-2024-25629 affecting package fluent-bit for versions less than 3.0.6-1

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
AZL-34687
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-35048 5.5

CVE-2024-25629 affecting package nodejs for versions less than 20.14.0-1

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
AZL-35048
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-35132 5.5

CVE-2024-25629 affecting package python-gevent for versions less than 23.9.1-4

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
AZL-35132
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVAZL-38126 5.5

CVE-2024-25629 affecting package ceph for versions less than 18.2.2-1

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
AZL-38126
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVAZL-43501 5.5

CVE-2024-25629 affecting package python-pycares 3.1.1-3

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
AZL-43501
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2024-25629 5.5
Record
BELL-CVE-2024-25629
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 4.4

c-ares out of bounds read in ares__read_line()

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
CVE-2024-25629
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-127
Updated
2026-11-02
OSVDEBIAN-CVE-2024-25629 5.5

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
DEBIAN-CVE-2024-25629
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2019 4.4

c-ares security update

This is c-ares, an asynchronous resolver library. It is intended for applications which need to perform DNS queries without blocking, or need to perform multiple

Security Fix(es):

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.(CVE-2024-25629)

Record
OESA-2024-2019
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2020 4.4

c-ares security update

This is c-ares, an asynchronous resolver library. It is intended for applications which need to perform DNS queries without blocking, or need to perform multiple

Security Fix(es):

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.(CVE-2024-25629)

Record
OESA-2024-2020
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2021 4.4

c-ares security update

This is c-ares, an asynchronous resolver library. It is intended for applications which need to perform DNS queries without blocking, or need to perform multiple

Security Fix(es):

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.(CVE-2024-25629)

Record
OESA-2024-2021
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2778 7.5

Red Hat Security Advisory: nodejs:20 security update

Record
RHSA-2024:2778
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2779 7.5

Red Hat Security Advisory: nodejs:18 security update

Record
RHSA-2024:2779
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2780 7.5

Red Hat Security Advisory: nodejs:18 security update

Record
RHSA-2024:2780
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2853 7.5

Red Hat Security Advisory: nodejs:20 security update

Record
RHSA-2024:2853
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2910 7.5

Red Hat Security Advisory: nodejs security update

Record
RHSA-2024:2910
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:3842 4.4

Red Hat Security Advisory: c-ares security update

Record
RHSA-2024:3842
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:4249 4.4

Red Hat Security Advisory: c-ares security update

Record
RHSA-2024:4249
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:4559 6.5

Red Hat Security Advisory: nodejs security update

Record
RHSA-2024:4559
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:4721 6.5

Red Hat Security Advisory: nodejs security update

Record
RHSA-2024:4721
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2024:2779 7.5

Important: nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: CONTINUATION frames DoS (CVE-2024-27983)

  • nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)

  • nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)

  • nghttp2: CONTINUATION frames DoS (CVE-2024-28182)

  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:2779
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2024:2853 7.5

Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

  • nghttp2: CONTINUATION frames DoS (CVE-2024-28182)

  • nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)

  • nodejs: CONTINUATION frames DoS (CVE-2024-27983)

  • nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:2853
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2024:2910 7.5

Important: nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: CONTINUATION frames DoS (CVE-2024-27983)

  • nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)

  • nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)

  • nghttp2: CONTINUATION frames DoS (CVE-2024-28182)

  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:2910
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2024:3842 4.4

Low: c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:3842
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2024:4249 4.4

Low: c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:4249
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2024-25629 5.5

CVE-2024-25629 in c-ares - Patched by Root

Root has patched CVE-2024-25629 in the c-ares package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2024-25629
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-25629 5.5

c-ares is a C library for asynchronous DNS requests. ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded NULL character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.

Record
UBUNTU-CVE-2024-25629
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2024:2778 No score

Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)
  • nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
  • nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
  • nodejs: CONTINUATION frames DoS (CVE-2024-27983)
  • nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:2778
Updated
2026-11-02
OSVALSA-2024:2779 No score

Important: nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: CONTINUATION frames DoS (CVE-2024-27983)
  • nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
  • nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)
  • nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:2779
Updated
2026-11-02
OSVALSA-2024:2780 No score

Important: nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: CONTINUATION frames DoS (CVE-2024-27983)
  • nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
  • nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)
  • nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:2780
Updated
2026-11-02
OSVALSA-2024:2853 No score

Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)
  • nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
  • nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
  • nodejs: CONTINUATION frames DoS (CVE-2024-27983)
  • nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:2853
Updated
2026-11-02
OSVALSA-2024:2910 No score

Important: nodejs security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: CONTINUATION frames DoS (CVE-2024-27983)
  • nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
  • nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)
  • nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:2910
Updated
2026-11-02
OSVALSA-2024:3842 No score

Low: c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3842
Updated
2026-11-02
OSVALSA-2024:4249 No score

Low: c-ares security update

The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API.

Security Fix(es):

  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:4249
Updated
2026-11-02
OSVCLSA-2025-1744721593 No score

c-ares: Fix of 4 CVEs

  • CVE-2024-25629: fix invalid memory read issue in ares__read_line()
  • CVE-2023-31130: fix buffer underflow in ares_inet_net_pton() for certain ipv6 addresses
  • CVE-2023-31147: fix issue of using weak random numbers in DNS query ids by replacing rand() with a modern OS-provided CSPRNG like arc4random()
  • CVE-2023-31124: prevent fallback to rand() for entropy generation which could allow an attacker to take advantage of the lack of entropy by not using a CSPRNG.
Record
CLSA-2025-1744721593
Updated
2026-11-02
OSVCLSA-2025-1756408700 No score

nodejs: Fix of CVE-2024-25629

  • CVE-2024-25629: prevent reading before buffer start when parsing config files containing an embedded NULL as the first character of a line by discarding such lines in ares__read_line()
Record
CLSA-2025-1756408700
Updated
2026-11-02
OSVMGASA-2024-0051 No score

Updated c-ares packages fix security vulnerabilities

The updated packages fix a security vulnerability: Out of bounds read in ares__read_line(). (CVE-2024-25629)

Record
MGASA-2024-0051
Updated
2026-11-02
OSVopenSUSE-SU-2024:13722-1 No score

c-ares-devel-1.27.0-1.1 on GA media

These are all security issues fixed in the c-ares-devel-1.27.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13722-1
Updated
2026-11-02
OSVRLSA-2024:2778 No score

Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

  • nghttp2: CONTINUATION frames DoS (CVE-2024-28182)

  • nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)

  • nodejs: CONTINUATION frames DoS (CVE-2024-27983)

  • nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:2778
Updated
2026-11-02
OSVRLSA-2024:2780 No score

Important: nodejs:18 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

  • nodejs: CONTINUATION frames DoS (CVE-2024-27983)

  • nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)

  • nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)

  • nghttp2: CONTINUATION frames DoS (CVE-2024-28182)

  • c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:2780
Updated
2026-11-02
OSVSUSE-SU-2024:1135-1 No score

Security update for libcares2

This update for libcares2 fixes the following issues:

  • CVE-2024-25629: Fixed out of bounds read in ares__read_line() (bsc#1220279).
Record
SUSE-SU-2024:1135-1
Updated
2026-11-02
OSVSUSE-SU-2024:1136-1 No score

Security update for c-ares

This update for c-ares fixes the following issues:

  • CVE-2024-25629: Fixed out of bounds read in ares__read_line() (bsc#1220279).
Record
SUSE-SU-2024:1136-1
Updated
2026-11-02
OSVSUSE-SU-2024:1136-2 No score

Security update for c-ares

This update for c-ares fixes the following issues:

  • CVE-2024-25629: Fixed out of bounds read in ares__read_line() (bsc#1220279).
Record
SUSE-SU-2024:1136-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
c-ares
Alpine:v3.16
 before 1.19.1-r1
1.19.1-r1
c-ares
Alpine:v3.17
 before 1.19.1-r1
1.19.1-r1
c-ares
Alpine:v3.18
 before 1.19.1-r1
1.19.1-r1
c-ares
Alpine:v3.19
 before 1.27.0-r0
1.27.0-r0
c-ares
Alpine:v3.20
 before 1.27.0-r0
1.27.0-r0
c-ares
Alpine:v3.21
 before 1.27.0-r0
1.27.0-r0
c-ares
Alpine:v3.22
 before 1.27.0-r0
1.27.0-r0
c-ares
Alpine:v3.23
 before 1.27.0-r0
1.27.0-r0
c-ares
Alpine:v3.24
 before 1.27.0-r0
1.27.0-r0
nodejs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module_el8.9.0+3827+11b91f3e
1:20.12.2-2.module_el8.9.0+3827+11b91f3e
Show 198 moreShow less
Affected packages
PackageAffectedFixed
nodejs-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module_el8.9.0+3827+11b91f3e
1:20.12.2-2.module_el8.9.0+3827+11b91f3e
nodejs-docs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module_el8.9.0+3827+11b91f3e
1:20.12.2-2.module_el8.9.0+3827+11b91f3e
nodejs-full-i18n
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module_el8.9.0+3827+11b91f3e
1:20.12.2-2.module_el8.9.0+3827+11b91f3e
nodejs-nodemon
AlmaLinux:8
From an advisory covering 5 CVEs
 before 3.0.1-1.module_el8.9.0+3731+490e3ce5
3.0.1-1.module_el8.9.0+3731+490e3ce5
nodejs-packaging
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2021.06-4.module_el8.9.0+3684+11b9e959
2021.06-4.module_el8.9.0+3684+11b9e959
nodejs-packaging-bundler
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2021.06-4.module_el8.9.0+3684+11b9e959
2021.06-4.module_el8.9.0+3684+11b9e959
npm
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:10.5.0-1.20.12.2.2.module_el8.9.0+3827+11b91f3e
1:10.5.0-1.20.12.2.2.module_el8.9.0+3827+11b91f3e
nodejs
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:18.20.2-2.module_el9.4.0+99+a01f7676
1:18.20.2-2.module_el9.4.0+99+a01f7676
nodejs-devel
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:18.20.2-2.module_el9.4.0+99+a01f7676
1:18.20.2-2.module_el9.4.0+99+a01f7676
nodejs-docs
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:18.20.2-2.module_el9.4.0+99+a01f7676
1:18.20.2-2.module_el9.4.0+99+a01f7676
nodejs-full-i18n
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:18.20.2-2.module_el9.4.0+99+a01f7676
1:18.20.2-2.module_el9.4.0+99+a01f7676
nodejs-nodemon
AlmaLinux:9
From an advisory covering 5 CVEs
 before 3.0.1-1.module_el9.2.0+36+853e48f5
3.0.1-1.module_el9.2.0+36+853e48f5
nodejs-packaging
AlmaLinux:9
From an advisory covering 5 CVEs
 before 2021.06-4.module_el9.1.0+13+d9a595ea
2021.06-4.module_el9.1.0+13+d9a595ea
nodejs-packaging-bundler
AlmaLinux:9
From an advisory covering 5 CVEs
 before 2021.06-4.module_el9.1.0+13+d9a595ea
2021.06-4.module_el9.1.0+13+d9a595ea
npm
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:10.5.0-1.18.20.2.2.module_el9.4.0+99+a01f7676
1:10.5.0-1.18.20.2.2.module_el9.4.0+99+a01f7676
nodejs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:18.20.2-1.module_el8.9.0+3828+c9fa9644
1:18.20.2-1.module_el8.9.0+3828+c9fa9644
nodejs-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:18.20.2-1.module_el8.9.0+3828+c9fa9644
1:18.20.2-1.module_el8.9.0+3828+c9fa9644
nodejs-docs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:18.20.2-1.module_el8.9.0+3828+c9fa9644
1:18.20.2-1.module_el8.9.0+3828+c9fa9644
nodejs-full-i18n
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:18.20.2-1.module_el8.9.0+3828+c9fa9644
1:18.20.2-1.module_el8.9.0+3828+c9fa9644
nodejs-nodemon
AlmaLinux:8
From an advisory covering 5 CVEs
 before 3.0.1-1.module_el8.8.0+3613+1ed8c91d
3.0.1-1.module_el8.8.0+3613+1ed8c91d
nodejs-packaging
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2021.06-4.module_el8.7.0+3343+ea2b7901
2021.06-4.module_el8.7.0+3343+ea2b7901
nodejs-packaging-bundler
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2021.06-4.module_el8.7.0+3343+ea2b7901
2021.06-4.module_el8.7.0+3343+ea2b7901
npm
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:10.5.0-1.18.20.2.1.module_el8.9.0+3828+c9fa9644
1:10.5.0-1.18.20.2.1.module_el8.9.0+3828+c9fa9644
nodejs
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module_el9.4.0+100+71fc9528
1:20.12.2-2.module_el9.4.0+100+71fc9528
nodejs-devel
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module_el9.4.0+100+71fc9528
1:20.12.2-2.module_el9.4.0+100+71fc9528
nodejs-docs
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module_el9.4.0+100+71fc9528
1:20.12.2-2.module_el9.4.0+100+71fc9528
nodejs-full-i18n
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module_el9.4.0+100+71fc9528
1:20.12.2-2.module_el9.4.0+100+71fc9528
nodejs-nodemon
AlmaLinux:9
From an advisory covering 5 CVEs
 before 3.0.1-1.module_el9.3.0+47+c33bc288
3.0.1-1.module_el9.3.0+47+c33bc288
nodejs-packaging
AlmaLinux:9
From an advisory covering 5 CVEs
 before 2021.06-4.module_el9.3.0+88+29afeaa2
2021.06-4.module_el9.3.0+88+29afeaa2
nodejs-packaging-bundler
AlmaLinux:9
From an advisory covering 5 CVEs
 before 2021.06-4.module_el9.3.0+88+29afeaa2
2021.06-4.module_el9.3.0+88+29afeaa2
npm
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:10.5.0-1.20.12.2.2.module_el9.4.0+100+71fc9528
1:10.5.0-1.20.12.2.2.module_el9.4.0+100+71fc9528
nodejs
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
nodejs-docs
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
nodejs-full-i18n
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
nodejs-libs
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
npm
AlmaLinux:9
From an advisory covering 5 CVEs
 before 1:8.19.4-1.16.20.2.8.el9_4
1:8.19.4-1.16.20.2.8.el9_4
c-ares
AlmaLinux:9
 before 1.19.1-2.el9_4
1.19.1-2.el9_4
c-ares-devel
AlmaLinux:9
 before 1.19.1-2.el9_4
1.19.1-2.el9_4
c-ares
AlmaLinux:8
 before 1.13.0-11.el8_10
1.13.0-11.el8_10
c-ares-devel
AlmaLinux:8
 before 1.13.0-11.el8_10
1.13.0-11.el8_10
c-ares
Azure Linux:2
 before 1.19.1-2
1.19.1-2
fluent-bit
Azure Linux:2
 before 2.2.3-1
2.2.3-1
grpc
Azure Linux:2
 before 1.42.0-9
1.42.0-9
nodejs18
Azure Linux:2
 before 18.20.2-1
18.20.2-1
python-gevent
Azure Linux:2
 before 21.1.2-3
21.1.2-3
c-ares
Azure Linux:3
 before 1.30.0-1
1.30.0-1
fluent-bit
Azure Linux:3
 before 3.0.6-1
3.0.6-1
nodejs
Azure Linux:3
 before 20.14.0-1
20.14.0-1
python-gevent
Azure Linux:3
 before 23.9.1-4
23.9.1-4
ceph
Azure Linux:3
 before 18.2.2-1
18.2.2-1
python-pycares
Azure Linux:2
 through 3.1.1-3 None known
c-ares
Alpaquita:23
 1.18.1-r1 up to 1.19.1-r1
1.19.1-r1
c-ares
Alpaquita:stream
 1.18.1-r1 up to 1.27.0-r0
1.27.0-r0
c-ares
BellSoft Hardened Containers:stream
 1.18.1-r1 up to 1.27.0-r0
1.27.0-r0
c-ares
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
 before 1.17.1-5.el9_2.1.tuxcare.els3
1.17.1-5.el9_2.1.tuxcare.els3
c-ares-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
 before 1.17.1-5.el9_2.1.tuxcare.els3
1.17.1-5.el9_2.1.tuxcare.els3
nodejs
TuxCare:AlmaLinux:9.2
 before 1:16.20.2-3.el9_2.tuxcare.els8
1:16.20.2-3.el9_2.tuxcare.els8
nodejs-devel
TuxCare:AlmaLinux:9.2
 before 1:16.20.2-3.el9_2.tuxcare.els8
1:16.20.2-3.el9_2.tuxcare.els8
nodejs-docs
TuxCare:AlmaLinux:9.2
 before 1:16.20.2-3.el9_2.tuxcare.els8
1:16.20.2-3.el9_2.tuxcare.els8
nodejs-full-i18n
TuxCare:AlmaLinux:9.2
 before 1:16.20.2-3.el9_2.tuxcare.els8
1:16.20.2-3.el9_2.tuxcare.els8
nodejs-libs
TuxCare:AlmaLinux:9.2
 before 1:16.20.2-3.el9_2.tuxcare.els8
1:16.20.2-3.el9_2.tuxcare.els8
npm
TuxCare:AlmaLinux:9.2
 before 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els8
1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els8
v8-devel
TuxCare:AlmaLinux:9.2
 before 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els8
2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els8
c-ares
Debian:12
 All versions, plus listed versions
1.18.1-31.19.0-11.19.1-11.19.1-21.19.1-3
Show 36 moreShow less
1.20.0-11.20.0-21.20.0-31.20.1-11.21.0-11.22.0-11.22.1-11.23.0-11.24.0-11.25.0-11.26.0-11.26.0-1.1~exp11.27.0-11.27.0-1.11.27.0-1.1~exp11.27.0-1.21.28.1-11.29.0-11.30.0-11.31.0-11.32.2-11.32.2-21.32.3-11.33.0-11.33.1-11.33.1-21.34.2-11.34.3-11.34.4-11.34.4-21.34.4-2.11.34.5-11.34.6-11.34.7-11.34.8-11.34.9-1
 None known
c-ares
Debian:13
 before 1.27.0-1
1.27.0-1
c-ares
Debian:14
 before 1.27.0-1
1.27.0-1
c-ares
Mageia:9
 before 1.19.1-1.1.mga9
1.19.1-1.1.mga9
c-ares
openEuler:22.03-LTS-SP1
 before 1.18.1-8.oe2203sp1
1.18.1-8.oe2203sp1
c-ares
openEuler:22.03-LTS-SP3
 before 1.18.1-8.oe2203sp3
1.18.1-8.oe2203sp3
c-ares
openEuler:20.03-LTS-SP4
 before 1.16.1-9.oe2003sp4
1.16.1-9.oe2003sp4
nodejs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
nodejs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
nodejs-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
nodejs-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
nodejs-docs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
nodejs-full-i18n
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
1:20.12.2-2.module+el8.9.0+21743+0b3f1be2
nodejs-nodemon
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.0.1-1.module+el8.9.0+20473+c4e3d824
0:3.0.1-1.module+el8.9.0+20473+c4e3d824
nodejs-packaging
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el8.9.0+19519+e25b965a
0:2021.06-4.module+el8.9.0+19519+e25b965a
nodejs-packaging-bundler
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el8.9.0+19519+e25b965a
0:2021.06-4.module+el8.9.0+19519+e25b965a
npm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2
1:10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2
nodejs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-2.module+el9.4.0+21742+692df1ea
1:18.20.2-2.module+el9.4.0+21742+692df1ea
nodejs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-2.module+el9.4.0+21742+692df1ea
1:18.20.2-2.module+el9.4.0+21742+692df1ea
nodejs-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-2.module+el9.4.0+21742+692df1ea
1:18.20.2-2.module+el9.4.0+21742+692df1ea
nodejs-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-2.module+el9.4.0+21742+692df1ea
1:18.20.2-2.module+el9.4.0+21742+692df1ea
nodejs-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-2.module+el9.4.0+21742+692df1ea
1:18.20.2-2.module+el9.4.0+21742+692df1ea
nodejs-full-i18n
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-2.module+el9.4.0+21742+692df1ea
1:18.20.2-2.module+el9.4.0+21742+692df1ea
nodejs-nodemon
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:3.0.1-1.module+el9.3.0+19762+d716bf3b
0:3.0.1-1.module+el9.3.0+19762+d716bf3b
nodejs-packaging
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el9.1.0+15718+e52ec601
0:2021.06-4.module+el9.1.0+15718+e52ec601
nodejs-packaging-bundler
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el9.1.0+15718+e52ec601
0:2021.06-4.module+el9.1.0+15718+e52ec601
npm
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:10.5.0-1.18.20.2.2.module+el9.4.0+21742+692df1ea
1:10.5.0-1.18.20.2.2.module+el9.4.0+21742+692df1ea
nodejs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-1.module+el8.9.0+21767+537f34ee
1:18.20.2-1.module+el8.9.0+21767+537f34ee
nodejs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-1.module+el8.9.0+21767+537f34ee
1:18.20.2-1.module+el8.9.0+21767+537f34ee
nodejs-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-1.module+el8.9.0+21767+537f34ee
1:18.20.2-1.module+el8.9.0+21767+537f34ee
nodejs-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-1.module+el8.9.0+21767+537f34ee
1:18.20.2-1.module+el8.9.0+21767+537f34ee
nodejs-docs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-1.module+el8.9.0+21767+537f34ee
1:18.20.2-1.module+el8.9.0+21767+537f34ee
nodejs-full-i18n
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:18.20.2-1.module+el8.9.0+21767+537f34ee
1:18.20.2-1.module+el8.9.0+21767+537f34ee
nodejs-nodemon
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.0.1-1.module+el8.9.0+21190+5ebd2c33
0:3.0.1-1.module+el8.9.0+21190+5ebd2c33
nodejs-packaging
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el8.9.0+21190+5ebd2c33
0:2021.06-4.module+el8.9.0+21190+5ebd2c33
nodejs-packaging-bundler
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el8.9.0+21190+5ebd2c33
0:2021.06-4.module+el8.9.0+21190+5ebd2c33
npm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:10.5.0-1.18.20.2.1.module+el8.9.0+21767+537f34ee
1:10.5.0-1.18.20.2.1.module+el8.9.0+21767+537f34ee
nodejs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
nodejs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
nodejs-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
nodejs-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
nodejs-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
nodejs-full-i18n
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
nodejs-nodemon
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:3.0.1-1.module+el9.3.0.z+20478+84a9f781
0:3.0.1-1.module+el9.3.0.z+20478+84a9f781
nodejs-packaging
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el9.3.0+19518+63aad52d
0:2021.06-4.module+el9.3.0+19518+63aad52d
nodejs-packaging-bundler
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el9.3.0+19518+63aad52d
0:2021.06-4.module+el9.3.0+19518+63aad52d
npm
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:10.5.0-1.20.12.2.2.module+el9.4.0+21731+46b5b8a7
1:10.5.0-1.20.12.2.2.module+el9.4.0+21731+46b5b8a7
nodejs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
nodejs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
nodejs-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
nodejs-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
nodejs-full-i18n
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
nodejs-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
nodejs-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
npm
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 1:8.19.4-1.16.20.2.8.el9_4
1:8.19.4-1.16.20.2.8.el9_4
c-ares-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.19.1-2.el9_4
0:1.19.1-2.el9_4
c-ares-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:1.19.1-2.el9_4
0:1.19.1-2.el9_4
c-ares-devel
Red Hat:enterprise_linux:9::appstream
 before 0:1.19.1-2.el9_4
0:1.19.1-2.el9_4
c-ares
Red Hat:enterprise_linux:9::baseos
 before 0:1.19.1-2.el9_4
0:1.19.1-2.el9_4
c-ares-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:1.19.1-2.el9_4
0:1.19.1-2.el9_4
c-ares-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:1.19.1-2.el9_4
0:1.19.1-2.el9_4
c-ares
Red Hat:enterprise_linux:8::baseos
 before 0:1.13.0-11.el8_10
0:1.13.0-11.el8_10
c-ares-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.13.0-11.el8_10
0:1.13.0-11.el8_10
c-ares-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1.13.0-11.el8_10
0:1.13.0-11.el8_10
c-ares-devel
Red Hat:enterprise_linux:8::baseos
 before 0:1.13.0-11.el8_10
0:1.13.0-11.el8_10
nodejs
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-6.el9_2.3
1:16.20.2-6.el9_2.3
nodejs-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-6.el9_2.3
1:16.20.2-6.el9_2.3
nodejs-debugsource
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-6.el9_2.3
1:16.20.2-6.el9_2.3
nodejs-docs
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-6.el9_2.3
1:16.20.2-6.el9_2.3
nodejs-full-i18n
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-6.el9_2.3
1:16.20.2-6.el9_2.3
nodejs-libs
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-6.el9_2.3
1:16.20.2-6.el9_2.3
nodejs-libs-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-6.el9_2.3
1:16.20.2-6.el9_2.3
npm
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 1:8.19.4-1.16.20.2.6.el9_2.3
1:8.19.4-1.16.20.2.6.el9_2.3
nodejs
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-9.el9_0
1:16.20.2-9.el9_0
nodejs-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-9.el9_0
1:16.20.2-9.el9_0
nodejs-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-9.el9_0
1:16.20.2-9.el9_0
nodejs-docs
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-9.el9_0
1:16.20.2-9.el9_0
nodejs-full-i18n
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-9.el9_0
1:16.20.2-9.el9_0
nodejs-libs
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-9.el9_0
1:16.20.2-9.el9_0
nodejs-libs-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 1:16.20.2-9.el9_0
1:16.20.2-9.el9_0
npm
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 1:8.19.4-1.16.20.2.9.el9_0
1:8.19.4-1.16.20.2.9.el9_0
nodejs
Rocky Linux:8
From an advisory covering 5 CVEs
 before 1:20.12.2-2.module+el8.9.0+1804+2708cc21
1:20.12.2-2.module+el8.9.0+1804+2708cc21
nodejs-nodemon
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:3.0.1-1.module+el8.8.0+1459+02651ab6
0:3.0.1-1.module+el8.8.0+1459+02651ab6
nodejs-packaging
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el8.7.0+1072+5b168780
0:2021.06-4.module+el8.7.0+1072+5b168780
nodejs-nodemon
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:3.0.1-1.module+el9.6.0+32322+a8b1fd01
0:3.0.1-1.module+el9.6.0+32322+a8b1fd01
nodejs-nodemon
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:3.0.1-1.module+el9.5.0+31770+0da7192d
0:3.0.1-1.module+el9.5.0+31770+0da7192d
nodejs-nodemon
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:3.0.1-1.module+el9.6.0+32045+2e5d342d
0:3.0.1-1.module+el9.6.0+32045+2e5d342d
nodejs-nodemon
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:3.0.1-1.module+el9.6.0+32143+ae966e5b
0:3.0.1-1.module+el9.6.0+32143+ae966e5b
nodejs-nodemon
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:3.0.1-1.module+el9.6.0+32144+1d29a396
0:3.0.1-1.module+el9.6.0+32144+1d29a396
nodejs-nodemon
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:3.0.1-1.module+el9.6.0+32185+bd121a25
0:3.0.1-1.module+el9.6.0+32185+bd121a25
nodejs-packaging
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el9.5.0+31770+0da7192d
0:2021.06-4.module+el9.5.0+31770+0da7192d
nodejs-packaging
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el9.6.0+32045+2e5d342d
0:2021.06-4.module+el9.6.0+32045+2e5d342d
nodejs-packaging
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el9.6.0+32048+5323bb50
0:2021.06-4.module+el9.6.0+32048+5323bb50
nodejs-packaging
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el9.6.0+32143+ae966e5b
0:2021.06-4.module+el9.6.0+32143+ae966e5b
nodejs-packaging
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el9.6.0+32144+1d29a396
0:2021.06-4.module+el9.6.0+32144+1d29a396
nodejs-packaging
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el9.6.0+32185+bd121a25
0:2021.06-4.module+el9.6.0+32185+bd121a25
nodejs-packaging
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:2021.06-4.module+el9.6.0+32322+a8b1fd01
0:2021.06-4.module+el9.6.0+32322+a8b1fd01
nodejs
Rocky Linux:8
From an advisory covering 5 CVEs
 before 1:18.20.2-1.module+el8.9.0+1803+9ac8b495
1:18.20.2-1.module+el8.9.0+1803+9ac8b495
nodejs
Rocky Linux:9
From an advisory covering 5 CVEs
 before 1:16.20.2-8.el9_4
1:16.20.2-8.el9_4
c-ares
Rocky Linux:9
 before 0:1.19.1-2.el9_4
0:1.19.1-2.el9_4
c-ares
Rocky Linux:8
 before 0:1.13.0-11.el8_10
0:1.13.0-11.el8_10
c-ares
Root:Debian:12
 before 1.18.1-3.root.io.2
1.18.1-3.root.io.21.18.1-3.root.io.11.18.1-3.aikido.3
rootio-c-ares
Root:Debian:12
 before 1.18.1-3.root.io.2
1.18.1-3.root.io.21.18.1-3.root.io.11.18.1-3.aikido.3
libcares2
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.9.1-9.21.1
1.9.1-9.21.1
libcares2
SUSE:Linux Enterprise Server 12 SP5
 before 1.9.1-9.21.1
1.9.1-9.21.1
libcares2
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.9.1-9.21.1
1.9.1-9.21.1
libcares2
SUSE:Linux Enterprise Workstation Extension 12 SP5
 before 1.9.1-9.21.1
1.9.1-9.21.1
c-ares
SUSE:Linux Enterprise Micro 5.3
 before 1.19.1-150000.3.26.1
1.19.1-150000.3.26.1
c-ares
SUSE:Linux Enterprise Micro 5.4
 before 1.19.1-150000.3.26.1
1.19.1-150000.3.26.1
c-ares
SUSE:Linux Enterprise Micro 5.5
 before 1.19.1-150000.3.26.1
1.19.1-150000.3.26.1
c-ares
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 1.19.1-150000.3.26.1
1.19.1-150000.3.26.1
c-ares
SUSE:Linux Enterprise Micro 5.1
 before 1.19.1-150000.3.26.1
1.19.1-150000.3.26.1
c-ares
SUSE:Linux Enterprise Micro 5.2
 before 1.19.1-150000.3.26.1
1.19.1-150000.3.26.1
c-ares
openSUSE:Leap Micro 5.3
 before 1.19.1-150000.3.26.1
1.19.1-150000.3.26.1
c-ares
openSUSE:Leap Micro 5.4
 before 1.19.1-150000.3.26.1
1.19.1-150000.3.26.1
c-ares
openSUSE:Leap 15.5
 before 1.19.1-150000.3.26.1
1.19.1-150000.3.26.1
c-ares
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 6 CVEs
 before 1.34.8-150000.3.29.1
1.34.8-150000.3.29.1
c-ares
Ubuntu:Pro:16.04:LTS
 before 1.10.0-3ubuntu0.2+esm3, plus listed versions
1.10.0-21.10.0-31.10.0-3ubuntu0.11.10.0-3ubuntu0.21.10.0-3ubuntu0.2+esm11.10.0-3ubuntu0.2+esm2
1.10.0-3ubuntu0.2+esm3
c-ares
Ubuntu:Pro:18.04:LTS
 before 1.14.0-1ubuntu0.2+esm2, plus listed versions
1.13.0-21.13.0-31.14.0-11.14.0-1ubuntu0.11.14.0-1ubuntu0.21.14.0-1ubuntu0.2+esm1
1.14.0-1ubuntu0.2+esm2
c-ares
Ubuntu:20.04:LTS
 before 1.15.0-1ubuntu0.5, plus listed versions
1.15.0-1build11.15.0-1ubuntu0.11.15.0-1ubuntu0.21.15.0-1ubuntu0.31.15.0-1ubuntu0.4
1.15.0-1ubuntu0.5
c-ares
Ubuntu:22.04:LTS
 before 1.18.1-1ubuntu0.22.04.3, plus listed versions
1.17.1-1ubuntu11.18.1-11.18.1-1build11.18.1-1ubuntu0.22.04.11.18.1-1ubuntu0.22.04.2
1.18.1-1ubuntu0.22.04.3
c-ares
openSUSE:Tumbleweed
 before 1.27.0-1.1
1.27.0-1.1

History

History
RecordedChangedSources
affected
factsOSV
aliases, publishedEUVD
first indexedCVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-25629 is a medium vulnerability (CVSS 4.4) in C-ares, published February 23, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in c-ares 1.19.1-r1.

References

Show 90 moreShow less
This page doesn't list everything

Left out on purpose, here and in the API, to keep responses small: 2 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open