CVE-2024-25629
published 2024-02-23CVE-2024-25629: c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`…
PriorityP422medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.35%
27.1th percentile
c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `/etc/hosts` file. If any of these configuration files has an embedded `NULL` character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.
Affected
31 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| c-ares | c-ares | < 1.27.0 | 1.27.0 |
| c-ares | c-ares | >= 0 < 1.27.0-1 | 1.27.0-1 |
| c-ares | c-ares | >= 0 < 1.27.0-1 | 1.27.0-1 |
| debian | c-ares | < c-ares 1.27.0-1 (forky) | c-ares 1.27.0-1 (forky) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| msrc | azl3_c-ares_1.25.0-1 | — | — |
| msrc | azl3_c-ares_1.30.0-1 | — | — |
| msrc | azl3_ceph_18.2.2-1 | — | — |
| msrc | azl3_ceph_18.2.2-8 | — | — |
| msrc | azl3_fluent-bit_3.0.6-1 | — | — |
| msrc | azl3_fluent-bit_3.0.6-2 | — | — |
| msrc | azl3_grpc_1.62.3-1 | — | — |
| msrc | azl3_nodejs_20.10.0-2 | — | — |
| msrc | azl3_nodejs_20.14.0-1 | — | — |
| msrc | azl3_python-gevent_23.9.1-4 | — | — |
| msrc | azl3_rubygem-mini_portile2_2.8.4-1 | — | — |
| msrc | azl3_tensorflow_2.16.1-9 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl2_c-ares_1.19.1-2 | — | — |
| msrc | cbl2_ceph_16.2.10-7 | — | — |
| msrc | cbl2_fluent-bit_2.2.3-1 | — | — |
| msrc | cbl2_fluent-bit_3.0.6-2 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_debian4.4MEDIUM
vendor_redhat4.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
c-ares vulnerability
vendor_ubuntu·2024-03-06
CVE-2024-25629 c-ares vulnerability
Title: c-ares vulnerability
Summary: c-ares could be made to crash if it received specially crafted
input.
Vojtěch Vobr discovered that c-ares incorrectly handled user input from
local configuration files. An attacker could possibly use this issue to
cause a denial of service via application crash.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
c-ares: Out of bounds read in ares__read_line()
vendor_redhat·2024-02-23·CVSS 4.4
CVE-2024-25629 [MEDIUM] CWE-127 c-ares: Out of bounds read in ares__read_line()
c-ares: Out of bounds read in ares__read_line()
c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `/etc/hosts` file. If any of these configuration files has an embedded `NULL` character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.
A vulnerability was found in c-ares where the ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version pri
Microsoft
c-ares out of bounds read in ares__read_line()
vendor_msrc·2024-02-13·CVSS 5.5
CVE-2024-25629 [MEDIUM] CWE-125 c-ares out of bounds read in ares__read_line()
c-ares out of bounds read in ares__read_line()
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
GitHub_M: GitHub_M
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.mi
Debian
CVE-2024-25629: c-ares - c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used...
vendor_debian·2024·CVSS 4.4
CVE-2024-25629 [MEDIUM] CVE-2024-25629: c-ares - c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used...
c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `/etc/hosts` file. If any of these configuration files has an embedded `NULL` character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 1.27.0-1)
sid: resolved (fixed in 1.27.0-1)
trixie: resolved (fixed in 1.27.0-1)
OSV
CVE-2024-25629: c-ares is a C library for asynchronous DNS requests
osv·2024-02-23·CVSS 5.5
CVE-2024-25629 [MEDIUM] CVE-2024-25629: c-ares is a C library for asynchronous DNS requests
c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `/etc/hosts` file. If any of these configuration files has an embedded `NULL` character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/c-ares/c-ares/commit/a804c04ddc8245fc8adf0e92368709639125e183https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48qhttps://lists.fedoraproject.org/archives/list/[email protected]/message/2P76QYINQNPEHUTEEDOUYIRZ2X6UVZ5K/https://lists.fedoraproject.org/archives/list/[email protected]/message/CSCMTSPDIE2UHU34TIXQQHZ6JTE3Y3VF/https://lists.fedoraproject.org/archives/list/[email protected]/message/GX37LFPFQ3T6FFMMFYQTEGIQXXN7F27U/https://github.com/c-ares/c-ares/commit/a804c04ddc8245fc8adf0e92368709639125e183https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48qhttps://lists.fedoraproject.org/archives/list/[email protected]/message/2P76QYINQNPEHUTEEDOUYIRZ2X6UVZ5K/https://lists.fedoraproject.org/archives/list/[email protected]/message/CSCMTSPDIE2UHU34TIXQQHZ6JTE3Y3VF/https://lists.fedoraproject.org/archives/list/[email protected]/message/GX37LFPFQ3T6FFMMFYQTEGIQXXN7F27U/
2024-02-23
Published