CVE-2020-22217
published 2023-08-22CVE-2020-22217: Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
PriorityP426medium5.9CVSS 3.1
AVNACHPRNUINSUCNINAH
EPSS
0.84%
53.7th percentile
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| c-ares | c-ares | — | — |
| c-ares | c-ares | — | — |
| c-ares | c-ares | >= 0 < 1.17.1-1 | 1.17.1-1 |
| c-ares | c-ares | >= 0 < 1.17.1-1 | 1.17.1-1 |
| c-ares | c-ares | >= 0 < 1.17.1-1 | 1.17.1-1 |
| c-ares | c-ares | >= 0 < 1.17.1-1 | 1.17.1-1 |
| debian | c-ares | < c-ares 1.17.1-1 (bookworm) | c-ares 1.17.1-1 (bookworm) |
| debian | debian_linux | — | — |
| msrc | azl3_ceph_18.2.2-8_on_azure_linux_3.0 | — | — |
| msrc | azl3_grpc_1.42.0-7_on_azure_linux_3.0 | — | — |
| msrc | azl3_tensorflow_2.16.1-9_on_azure_linux_3.0 | — | — |
| msrc | cbl2_ceph_16.2.10-7_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_python-gevent_21.1.2-1_on_cbl_mariner_2.0 | — | — |
| paloalto | pan-os | — | — |
CVSS provenance
nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
osv5.9MEDIUM
vendor_debian5.9MEDIUM
vendor_msrc5.9MEDIUM
vendor_redhat5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
vendor_paloalto·2024-04-10·CVSS 9.8
CVE-2015-5739 [CRITICAL] PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS. While it was not determined that these CVEs have any significant impact on PAN-OS, they have been fixed out of an abundance of caution. CVE Summary CVE-2015-5739 This CVE is fixed in PAN-OS 11.0.4, and all later PAN-OS versions. CVE-2016-10228 This CVE is fixed in PAN-OS 11.1.3, and all later PAN-OS versions. CVE-2017-8923 This CVE is fixed in PAN-OS 10.2.8, 11.0.3, and all later PAN-OS versions. CVE-2017-9120 This CVE is fixed in PAN-OS 10.2.8, 11.0.3, and all later PAN-OS versions. CVE-2018-25009 This CVE is fixed in PAN-OS 10.2.8, 11.0.4, 11.1.3, and all later PAN-OS versions. CVE-2
Ubuntu
c-ares vulnerability
vendor_ubuntu·2023-09-18
CVE-2020-22217 c-ares vulnerability
Title: c-ares vulnerability
Summary: c-ares could be made to crash if it received specially crafted network
traffic.
It was discovered that c-ares incorrectly parsed certain SOA replies. A
remote attacker could possibly use this issue to cause c-res to crash,
resulting in a denial of service.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
c-ares: Heap buffer over read in ares_parse_soa_reply
vendor_redhat·2023-08-22·CVSS 5.9
CVE-2020-22217 [MEDIUM] CWE-126 c-ares: Heap buffer over read in ares_parse_soa_reply
c-ares: Heap buffer over read in ares_parse_soa_reply
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
A heap buffer over-read flaw was found in c-ares via the ares_parse_soa_reply function in ares_parse_soa_reply.c.
Statement: The attack vector for this flaw initiates from a malicious server (a SOA reply to a client query) which requires a attacker set up a server a make it to be queried by a victim through cache poisoning or MITM, raising the Attack Complexity to High.
This being a out of bounds reads does not bring a risk of memory corruption, which makes it of none impact to Integrity. Also the read limitis 2 bytes (16bit, unsigned short int) from the DNS_QUERY_TYPE MACRO[1] return and the read value would
Microsoft
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
vendor_msrc·2023-08-08·CVSS 5.9
CVE-2020-22217 [MEDIUM] CWE-125 Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
mitre: mitre
Customer Action Req
Debian
CVE-2020-22217: c-ares - Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function a...
vendor_debian·2020·CVSS 5.9
CVE-2020-22217 [MEDIUM] CVE-2020-22217: c-ares - Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function a...
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
Scope: local
bookworm: resolved (fixed in 1.17.1-1)
bullseye: resolved (fixed in 1.17.1-1)
forky: resolved (fixed in 1.17.1-1)
sid: resolved (fixed in 1.17.1-1)
trixie: resolved (fixed in 1.17.1-1)
OSV
CVE-2020-22217: Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply
osv·2023-08-22·CVSS 5.9
CVE-2020-22217 [MEDIUM] CVE-2020-22217: Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
GHSA
GHSA-88q4-8vpj-fqpg: Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply
ghsa_unreviewed·2023-08-22
CVE-2020-22217 [MEDIUM] CWE-125 GHSA-88q4-8vpj-fqpg: Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-08-22
Published