USN-8951-1: c-ares vulnerabilities

It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-22217) It was discovered that c-ares incorrectly handled certain sortlist strings. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2022-4904) It was discovered that c-ares did not properly limit DNS compression p…

Ubuntu Security Notices에서 읽기

2026. 10. 22. 오전 03:20, Ubuntu Security Notices에서 "USN-8951-1: c-ares vulnerabilities"을(를) 게시했습니다 (유형: 취약점 권고). 관련 기술: Ubuntu, Linux. CVE: CVE-2020-22217, CVE-2022-4904.