CVE-2016-5180

Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.

Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.

Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.

• CVE-2016-5180: fix heap-based buffer overflow in the ares_create_query causing DoS

In c-ares before 1.12.0, When a string is passed in to 'ares_create_query' or 'ares_mkquery' and uses an escaped trailing dot, like "hello.", c-ares calculates the string length wrong and subsequently writes outside of the the allocated buffer with one byte. The wrongly written byte is the least significant byte of the 'dnsclass' argument; most commonly 1 (CVE-2016-5180).

These are all security issues fixed in the libcares-devel-1.12.0-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the nodejs4-4.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

This update for nodejs4 fixes the following issues:

Security issues fixed:

• CVE-2016-5180: c-ares: Fix for single-byte buffer overwrite (bsc#1007728).

Bug fixes:

• bsc#1009011: npm4 should provide versioned nodejs-npm and npm allowing nodejs-packaging to continue to function properly in Leap 42.2

This update for libcares2 fixes the following issues:

• Add patch to fix single byte out of buffer write (CVE-2016-5180, bsc#1007728)

This update for libcares2 fixes the following issues:

• Add patch to fix single byte out of buffer write (CVE-2016-5180, bsc#1007728)

Gzob Qq discovered that c-ares incorrectly handled certain hostnames. A remote attacker could use this issue to cause applications using c-ares to crash, resulting in a denial of service, or possibly execute arbitrary code.