CA
Product
c-ares
by c-ares · last CVE Sep 18, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 4Low 1
Watch

Add c-ares to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-31498
8.3
1%
Apr 8
c-ares has a use-after-free in read_answers()
Affected: >= 1.32.3, < 1.34.5
CVE-2026-69184
7.5
0%
Sep 18
c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains
Affected: < 1.34.7
CVE-2026-33630
7.5
1%
Sep 3
c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP
Affected: >= 1.32.3, < 1.34.7
CVE-2017-1000381
7.5
3%
Jul 7
The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS…
Affected: 1.8.0; 1.9.0; 1.9.1; 1.10.0; 1.12.0
Showing 4