CA
Product
c-ares
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 4Low 1
Watch
Add c-ares to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-62408 | 5.9 | Dec 8 | c-ares has a Use After Free vulnerability when connection is cleaned up after error Affected: > 1.32.3, < 1.34.6 |
| CVE-2020-22217 | 5.9 | Aug 22 | Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c Affected: 1.16.1; 1.17.0 |
| CVE-2024-25629 | 5.5 | Feb 23 | c-ares is a C library for asynchronous DNS requests Affected: before 1.27.0 |
| CVE-2026-69186 | 5.3 | Sep 18 | c-ares: Memory-amplification denial of service via unvalidated DNS header record counts Affected: < 1.34.7 |
Showing 4