MGASA-2021-0007
Updated c-ares packages fix security vulnerabilities
Avoid read-heap-buffer-overflow in ares_parse_soa_reply found during fuzzing.
Avoid theoretical buffer overflow in RC4 loop comparison.
Empty hquery->name could lead to invalid memory access.
ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was passed in.
What each source reports
OSV No score
Updated c-ares packages fix security vulnerabilities
Avoid read-heap-buffer-overflow in ares_parse_soa_reply found during fuzzing.
Avoid theoretical buffer overflow in RC4 loop comparison.
Empty hquery->name could lead to invalid memory access.
ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was passed in.
- Record
MGASA-2021-0007- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
c-aresMageia:7 |
before 1.17.1-1.mga7 | 1.17.1-1.mga7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2021-0007 is a vulnerability with no CVSS score yet in c-ares, published January 8, 2021. No source lists public exploit code. Fixed in c-ares 1.17.1-1.mga7.