{"id":"ubuntu-usn-b484c8b72c54","seq":1259820,"kind":"advisory","title":"USN-8951-1: c-ares vulnerabilities","url":"https://ubuntu.com/security/notices/USN-8951-1","permalink":"https://vulnpulse.app/items/ubuntu-usn-b484c8b72c54","summary":"It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-22217) It was discovered that c-ares incorrectly handled certain sortlist strings. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2022-4904) It was discovered that c-ares did not properly limit DNS compression p…","severity":null,"techs":["ubuntu","linux"],"cves":["CVE-2020-22217","CVE-2022-4904"],"tags":["security"],"source":{"id":"ubuntu-usn","name":"Ubuntu Security Notices"},"published_at":"2026-10-21T18:20:42.000Z","fetched_at":"2026-10-26T07:39:16.676Z"}