| Bug | bookworm | trixie | forky | sid | Description |
|---|
| TEMP-0000000-E507BD | vulnerable | vulnerable | fixed | fixed | Memory corruption when an application cancels its lookups after a connection failure |
| TEMP-0000000-E98F67 | vulnerable | vulnerable | fixed | fixed | Use-after-free when an application cancels lookups from a callback, or shuts a channel down |
| TEMP-0000000-D8744D | vulnerable | vulnerable | fixed | fixed | Use-after-free of a cached DNS answer while the application is still reading it |
| TEMP-0000000-CAE4D7 | vulnerable | vulnerable | fixed | fixed | Buffer overflow when ares_dup() or ares_save_options() runs while another thread changes the servers |
| TEMP-0000000-C2AE8A | vulnerable | vulnerable | fixed | fixed | Use-after-free of a lookup after shutting down a failed connection |
| TEMP-0000000-AD496C | vulnerable | vulnerable | fixed | fixed | A DNS reply that arrived from a different server than the one queried could be accepted |
| TEMP-0000000-50178F | vulnerable | vulnerable | fixed | fixed | Use-after-free of a connection after the socket-state callback returns |
| TEMP-0000000-6441FD | vulnerable | vulnerable | fixed | fixed | Use-after-free when an application cancels lookups from a server-state callback |
| TEMP-0000000-473C61 | vulnerable | vulnerable | fixed | fixed | The query cache could return an answer obtained using different EDNS options |
| TEMP-0000000-22B6CC | vulnerable | vulnerable | fixed | fixed | Uninitialized memory returned for a numeric IPv6 name with a prefix length |
| TEMP-0000000-0A83A0 | vulnerable | vulnerable | fixed | fixed | Use-after-free of a server record when an application changes its DNS servers from a callback |
| CVE-2026-69186 | fixed | vulnerable (no DSA) | fixed | fixed | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_ ... |
| CVE-2026-69184 | fixed | vulnerable (no DSA) | fixed | fixed | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_ ... |
| CVE-2026-33630 | fixed | vulnerable (no DSA) | fixed | fixed | c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34 ... |
| CVE-2024-25629 | vulnerable (no DSA) | fixed | fixed | fixed | c-ares is a C library for asynchronous DNS requests. `ares__read_line( ... |
| Bug | Description |
|---|
| CVE-2025-62408 | c-ares is an asynchronous resolver library. Versions 1.32.3 through 1. ... |
| CVE-2025-31498 | c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4 ... |
| CVE-2023-32067 | c-ares is an asynchronous resolver library. c-ares is vulnerable to de ... |
| CVE-2023-31130 | c-ares is an asynchronous resolver library. ares_inet_net_pton() is vu ... |
| CVE-2022-4904 | A flaw was found in the c-ares package. The ares_set_sortlist is missi ... |
| CVE-2021-3672 | A flaw was found in c-ares library, where a missing input validation c ... |
| CVE-2020-22217 | Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via ... |
| CVE-2020-14354 | A possible use-after-free and double-free in c-ares lib version 1.16.0 ... |
| CVE-2020-8277 | A Node.js application that allows an attacker to trigger a DNS request ... |
| CVE-2017-1000381 | The c-ares function `ares_parse_naptr_reply()`, which is used for pars ... |
| CVE-2016-5180 | Heap-based buffer overflow in the ares_create_query function in c-ares ... |