CLSA-2026-1787663550

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787663550.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1787663550
Upstream
Published
2026-08-25T13:12:41Z
Modified
2026-10-26T09:32:03Z
Summary
Fix CVE(s): CVE-2023-32067
Details
  • SECURITY UPDATE: denial of service via a 0-length UDP packet
    • debian/patches/CVE-2023-32067.patch: in read_udp_packets() in ares_process.c, treat a 0-length UDP read as a 0-length packet and keep reading instead of tearing the server connection down; only a negative return value is now an error, and an answer from a mismatched address no longer stops the read loop.
    • CVE-2023-32067
References

Affected packages

TuxCare:Ubuntu:18.04 / libc-ares-dev

Package

Name
libc-ares-dev
Purl
pkg:deb/tuxcare/libc-ares-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.14.0-1ubuntu0.2+tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787663550.json"

TuxCare:Ubuntu:18.04 / libc-ares2

Package

Name
libc-ares2
Purl
pkg:deb/tuxcare/libc-ares2?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.14.0-1ubuntu0.2+tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787663550.json"