CVE-2016-5180

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-5180
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5180.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-5180
Downstream
Related
Published
2016-10-03T15:59:03.270Z
Modified
2026-03-15T22:10:03.255615Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.

References

Affected packages

Git / github.com/c-ares/c-ares

Affected ranges

Type
GIT
Repo
https://github.com/c-ares/c-ares
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7325b5ca07a6ca9d1875df1a396a4016eae42598
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
727cd05fabb3ba29b02c19740c28d8ec21ec008f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9b9d36f8484596593ed65022d2a81da3042d4c8e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e07499e96435c59638145ff2fbf72afe6944bb8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a39a54189b21362566086e9ba9676005ffb512a1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
93bb7ef1ea2fbc9f39a42d5479b3626b4e17d37d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
178f8b401f27b9cfb8e2d6d6b6f616e5239d2aca
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
73b3390b834c8e3918c9e6350905fceef90613b1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2d09f0bf7c46a306d1e941f3d66fddbf3005e025
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d71fd1b305e3de75a533d8438c7cb005dc8b58aa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
70ff6e180af7a7993b5bcf9199da0c569f0657d9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
103dec073ecd8bd13dcd4f8342ae25bc2d3f252d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5923ba2a53fcae11fc1dc4f7b4dd38a877593a00
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
890a14372253ec2824aa390d629f683ac648f7ff
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
954ec10e5a33f89356ae9ce67d6ad442eb523442
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b354607aedcac511caf348e68c10535099c82579
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
622313ab3b1c4ea96c3a9fa46081f4303720d7f4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f037316e4beb11ad208dfadea6ff97e610940ac7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b649328be5090e91211a8a4b6932be2c3e578e1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b743f875d349890547900d0ec9060138aea324ec
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
46fa9cad7984cb632c9f8776297fe4a86e19e0d8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e7fe2744db383c4489b7adc2b74f8ec3069367e4
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.5.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.5.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.5.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.6.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.7.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.7.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.7.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.7.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.7.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.7.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.0"
        }
    ]
}
Type
GIT
Repo
https://github.com/nodejs/node
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b82bb600370db7207a39e53329af228f6af3ffa1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1d7a47f29cb3913b714134fef8ccbf5b1c2d3844
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba
Introduced
163ca274230fce536afe76c64676c332693ad7c1
Fixed
262dd62a9248d7021966a9d00cd6632ea1f087bc
Introduced
2b18916ff054309a07408719b62e2b6a4f1e056a
Fixed
1da5ccffbcaf126d34442b55194cde86c8a583a4
Introduced
f9f837885343a2a3f5ba2b8c510eaac395c8c865
Fixed
f0052e40cdee7371bd209e84554f0bb43357aa14
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
aff2a0a4754ddba26e161bc66cd4392fc28dd146
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0"
        },
        {
            "introduced": "0.10.0"
        },
        {
            "fixed": "0.10.48"
        },
        {
            "introduced": "0.12.0"
        },
        {
            "fixed": "0.12.17"
        },
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.6.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.10"
        }
    ]
}

Affected versions

Other
cares-1_1_0
curl-7_10_8
curl-7_11_0
v0.*
v0.10.0
v0.10.1
v0.10.10
v0.10.11
v0.10.12
v0.10.13
v0.10.14
v0.10.15
v0.10.16
v0.10.17
v0.10.18
v0.10.19
v0.10.2
v0.10.20
v0.10.21
v0.10.22
v0.10.23
v0.10.24
v0.10.25
v0.10.26
v0.10.27
v0.10.28
v0.10.29
v0.10.3
v0.10.30
v0.10.31
v0.10.32
v0.10.4
v0.10.5
v0.10.6
v0.10.7
v0.10.8
v0.10.9
v0.11.0
v0.11.1
v0.11.10
v0.11.11
v0.11.12
v0.11.13
v0.11.2
v0.11.3
v0.11.4
v0.11.5
v0.11.6
v0.11.7
v0.11.8
v0.11.9
v1.*
v1.0.0
v1.0.0-release
v1.0.1
v1.0.1-release
v1.0.2
v1.0.2-release
v1.0.3
v1.0.4
v1.1.0
v1.2.0
v1.3.0
v1.4.1
v1.4.2
v1.4.3
v1.5.0
v1.5.1
v1.6.0
v1.6.1
v1.6.2
v1.6.3
v1.6.4
v1.7.0
v1.7.1
v1.8.1
v2.*
v2.0.0
v2.0.1
v2.0.2
v2.1.0
v2.2.0
v2.2.1
v2.3.0
v2.3.1
v2.3.2
v2.3.3
v2.3.4
v2.4.0
v2.5.0
v3.*
v3.0.0
v4.*
v4.0.0
v4.1.0
v4.1.1
v4.1.2
v4.2.0
v4.2.1
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.3.0
v4.3.1
v4.3.2
v4.4.0
v4.4.1
v4.4.2
v4.4.3
v4.4.4
v4.4.5
v4.4.6
v4.4.7
v4.5.0
v4.6.0

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "16.04"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5180.json"