MGASA-2021-0007

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2021-0007.html

Import Source

https://advisories.mageia.org/MGASA-2021-0007.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2021-0007

Published

2021-01-08T13:59:29Z

Modified

2026-04-16T04:25:29.599289Z

Summary

Updated c-ares packages fix security vulnerabilities

Details

Avoid read-heap-buffer-overflow in aresparsesoa_reply found during fuzzing.

Avoid theoretical buffer overflow in RC4 loop comparison.

Empty hquery->name could lead to invalid memory access.

aresparse{a,aaaa}_reply() could return a larger *naddrttls than was passed in.

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.17.1-1.mga7

{
    "section": "core"
}

source

"https://advisories.mageia.org/MGASA-2021-0007.json"