CVE-2016-5180
03.10.2016, 15:59
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.Enginsight
| Vendor | Product | Version |
|---|---|---|
| c-ares | c-ares | 1.0.0 |
| c-ares | c-ares | 1.1.0 |
| c-ares | c-ares | 1.2.0 |
| c-ares | c-ares | 1.2.1 |
| c-ares | c-ares | 1.3.0 |
| c-ares | c-ares | 1.3.1 |
| c-ares | c-ares | 1.3.2 |
| c-ares | c-ares | 1.4.0 |
| c-ares | c-ares | 1.5.0 |
| c-ares | c-ares | 1.5.1 |
| c-ares | c-ares | 1.5.2 |
| c-ares | c-ares | 1.5.3 |
| c-ares | c-ares | 1.6.0 |
| c-ares | c-ares | 1.7.0 |
| c-ares | c-ares | 1.7.1 |
| c-ares | c-ares | 1.7.2 |
| c-ares | c-ares | 1.7.3 |
| c-ares | c-ares | 1.7.4 |
| c-ares | c-ares | 1.7.5 |
| c-ares | c-ares | 1.8.0 |
| c-ares | c-ares | 1.9.0 |
| c-ares | c-ares | 1.9.1 |
| c-ares | c-ares | 1.10.0 |
| c-ares_project | c-ares | 1.11.0 |
| debian | debian_linux | 8.0 |
| nodejs | node.js | 0.10.0 ≤ 𝑥 < 0.10.48 |
| nodejs | node.js | 0.12.0 ≤ 𝑥 < 0.12.17 |
| nodejs | node.js | 4.0.0 ≤ 𝑥 < 4.6.1 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 16.10 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References