CVE-2022-4904

A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.6 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
Affected Products (NVD)
VendorProductVersion
c-ares_projectc-ares
𝑥
< 1.19.0
redhatsoftware_collections
-
redhatenterprise_linux
8.0
redhatenterprise_linux
9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
c-ares
bookworm
1.18.1-3
fixed
bullseye
1.17.1-1+deb11u3
fixed
bullseye (security)
1.17.1-1+deb11u3
fixed
sid
1.34.2-1
fixed
trixie
1.34.2-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
c-ares
bionic
Fixed 1.14.0-1ubuntu0.2
released
focal
Fixed 1.15.0-1ubuntu0.2
released
jammy
Fixed 1.18.1-1ubuntu0.22.04.1
released
kinetic
Fixed 1.18.1-1ubuntu0.22.10.1
released
lunar
not-affected
mantic
not-affected
noble
not-affected
trusty
ignored
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
c-ares-devel
suse enterprise desktop 15 SP4
1.19.0-150000.3.20.1
fixed
suse enterprise desktop 15 SP5
1.19.0-150000.3.20.1
fixed
suse enterprise desktop 15 SP6
1.19.0-150000.3.20.1
fixed
suse enterprise desktop 15 SP7
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP1
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP2
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP3
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP4
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP5
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP6
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP7
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP1
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP2
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP3
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP4
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP5
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP6
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP7
1.19.0-150000.3.20.1
fixed
libcares2
suse enterprise desktop 15 SP4
1.19.0-150000.3.20.1
fixed
suse enterprise desktop 15 SP5
1.19.0-150000.3.20.1
fixed
suse enterprise desktop 15 SP6
1.19.0-150000.3.20.1
fixed
suse enterprise desktop 15 SP7
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP1
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP2
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP3
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP4
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP5
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP6
1.19.0-150000.3.20.1
fixed
suse enterprise sap 15 SP7
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP1
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP2
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP3
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP4
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP5
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP6
1.19.0-150000.3.20.1
fixed
suse enterprise server 15 SP7
1.19.0-150000.3.20.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
c-ares
RHEL 8
0:1.13.0-8.el8
fixed
RHEL 8.8 AUS
0:1.13.0-6.el8_8.3
fixed
RHEL 8.8 E4S
0:1.13.0-6.el8_8.3
fixed
RHEL 8.8 EUS
0:1.13.0-6.el8_8.3
fixed
RHEL 8.8 TUS
0:1.13.0-6.el8_8.3
fixed
RHEL 9
0:1.19.1-1.el9
fixed
c-ares-devel
RHEL 8
0:1.13.0-8.el8
fixed
RHEL 8.8 AUS
0:1.13.0-6.el8_8.3
fixed
RHEL 8.8 E4S
0:1.13.0-6.el8_8.3
fixed
RHEL 8.8 EUS
0:1.13.0-6.el8_8.3
fixed
RHEL 8.8 TUS
0:1.13.0-6.el8_8.3
fixed
RHEL 9
0:1.19.1-1.el9
fixed
nodejs
RHEL 9
1:16.19.1-1.el9_2
fixed
nodejs-docs
RHEL 9
1:16.19.1-1.el9_2
fixed
nodejs-full-i18n
RHEL 9
1:16.19.1-1.el9_2
fixed
nodejs-libs
RHEL 9
1:16.19.1-1.el9_2
fixed
nodejs-nodemon
RHEL 9
0:2.0.20-3.el9_2
fixed
npm
RHEL 9
1:8.19.3-1.16.19.1.1.el9_2
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
c-ares
Amazon Linux 1
0:1.17.2-1.10.amzn1
fixed
Amazon Linux 2
0:1.10.0-3.amzn2.0.4
fixed
Amazon Linux 2023
0:1.19.0-1.amzn2023
fixed
c-ares-debuginfo
Amazon Linux 1
0:1.17.2-1.10.amzn1
fixed
Amazon Linux 2
0:1.10.0-3.amzn2.0.4
fixed
Amazon Linux 2023
0:1.19.0-1.amzn2023
fixed
c-ares-debugsource
Amazon Linux 2023
0:1.19.0-1.amzn2023
fixed
c-ares-devel
Amazon Linux 1
0:1.17.2-1.10.amzn1
fixed
Amazon Linux 2
0:1.10.0-3.amzn2.0.4
fixed
Amazon Linux 2023
0:1.19.0-1.amzn2023
fixed
nodejs
Amazon Linux 2023
1:18.12.1-1.amzn2023.0.6
fixed
nodejs-debuginfo
Amazon Linux 2023
1:18.12.1-1.amzn2023.0.6
fixed
nodejs-debugsource
Amazon Linux 2023
1:18.12.1-1.amzn2023.0.6
fixed
nodejs-devel
Amazon Linux 2023
1:18.12.1-1.amzn2023.0.6
fixed
nodejs-docs
Amazon Linux 2023
1:18.12.1-1.amzn2023.0.6
fixed
nodejs-full-i18n
Amazon Linux 2023
1:18.12.1-1.amzn2023.0.6
fixed
nodejs-libs
Amazon Linux 2023
1:18.12.1-1.amzn2023.0.6
fixed
nodejs-libs-debuginfo
Amazon Linux 2023
1:18.12.1-1.amzn2023.0.6
fixed
npm
Amazon Linux 2023
1:8.19.2-1.18.12.1.1.amzn2023.0.6
fixed
v8-devel
Amazon Linux 2023
2:10.2.154.15-1.18.12.1.1.amzn2023.0.6
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
c-ares
CBL-Mariner 1.0
0:1.19.0-1.cm1
fixed
CBL-Mariner 2.0
0:1.19.0-1.cm2
fixed
grpc
Azure Linux 3.0
0:1.62.0-2.azl3
fixed
nodejs
CBL-Mariner 2.0
0:16.20.1-2.cm2
fixed
python-gevent
CBL-Mariner 2.0
0:21.1.2-3.cm2
fixed
Common Weakness Enumeration
References
https://bugzilla.redhat.com/show_bug.cgi?id=2168631
https://github.com/c-ares/c-ares/issues/496
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/
https://security.gentoo.org/glsa/202401-02
https://bugzilla.redhat.com/show_bug.cgi?id=2168631
https://github.com/c-ares/c-ares/issues/496
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/
https://security.gentoo.org/glsa/202401-02