| Bug | bookworm | trixie | forky | sid | Description |
|---|
| TEMP-0000000-E04A24 | vulnerable | vulnerable | fixed | fixed | GHSA-v33j-65h4-4ch8: Use-after-free when an application cancels lookups from a server-state callback |
| TEMP-0000000-824999 | vulnerable | vulnerable | fixed | fixed | GHSA-ph6c-3cvx-mq6v: Buffer overflow when ares_dup() or ares_save_options() runs while another thread changes the servers |
| TEMP-0000000-82552D | vulnerable | vulnerable | fixed | fixed | GHSA-fqh5-3x7m-wp44: A DNS reply that arrived from a different server than the one queried could be accepted |
| TEMP-0000000-17144A | vulnerable | vulnerable | fixed | fixed | GHSA-mw23-pfg6-2x9r: Use-after-free of a connection after the socket-state callback returns |
| TEMP-0000000-9844B1 | vulnerable | vulnerable | fixed | fixed | GHSA-pj7p-v3cw-hq66: Use-after-free of a server record when an application changes its DNS servers from a callback |
| TEMP-0000000-9090EA | vulnerable | vulnerable | fixed | fixed | GHSA-grv7-fq5q-9vfc: Use-after-free of a cached DNS answer while the application is still reading it |
| TEMP-0000000-1568E2 | vulnerable | vulnerable | fixed | fixed | GHSA-wpr3-8q3r-4q8c: Memory corruption when an application cancels its lookups after a connection failure |
| TEMP-0000000-96B69D | vulnerable | vulnerable | fixed | fixed | GHSA-wrgc-prmw-27xh: The query cache could return an answer obtained using different EDNS options |
| TEMP-0000000-95D344 | vulnerable | vulnerable | fixed | fixed | GHSA-cfcv-8v2j-qj6r: Uninitialized memory returned for a numeric IPv6 name with a prefix length |
| TEMP-0000000-3EDE07 | vulnerable | vulnerable | fixed | fixed | GHSA-97vq-4mxv-7vhm: Use-after-free of a lookup after shutting down a failed connection |
| TEMP-0000000-1C3FE9 | vulnerable | vulnerable | fixed | fixed | GHSA-rf6g-ww74-97qh: Use-after-free when an application cancels lookups from a callback, or shuts a channel down |
| CVE-2024-25629 | vulnerable (no DSA) | fixed | fixed | fixed | c-ares is a C library for asynchronous DNS requests. `ares__read_line( ... |
| Bug | Description |
|---|
| CVE-2026-69186 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_ ... |
| CVE-2026-69184 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_ ... |
| CVE-2026-33630 | c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34 ... |
| CVE-2025-62408 | c-ares is an asynchronous resolver library. Versions 1.32.3 through 1. ... |
| CVE-2025-31498 | c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4 ... |
| CVE-2023-32067 | c-ares is an asynchronous resolver library. c-ares is vulnerable to de ... |
| CVE-2023-31130 | c-ares is an asynchronous resolver library. ares_inet_net_pton() is vu ... |
| CVE-2022-4904 | A flaw was found in the c-ares package. The ares_set_sortlist is missi ... |
| CVE-2021-3672 | A flaw was found in c-ares library, where a missing input validation c ... |
| CVE-2020-22217 | Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via ... |
| CVE-2020-14354 | A possible use-after-free and double-free in c-ares lib version 1.16.0 ... |
| CVE-2020-8277 | A Node.js application that allows an attacker to trigger a DNS request ... |
| CVE-2017-1000381 | The c-ares function `ares_parse_naptr_reply()`, which is used for pars ... |
| CVE-2016-5180 | Heap-based buffer overflow in the ares_create_query function in c-ares ... |