Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 7 MGASA-2021-0007 Moderate: C-ares Memory Access Issues

mageia
Calendar Grey January 8, 2021
Dist Mageia Esm H88
Patch release for c-ares in Mageia focusing on critical heap buffer overflow vulnerabilities and memory access problems discovered through fuzz testing.
Avoid read-heap-buffer-overflow in ares_parse_soa_reply found during fuzzing

Summary

Avoid read-heap-buffer-overflow in ares_parse_soa_reply found during fuzzing. Avoid theoretical buffer overflow in RC4 loop comparison.

References

- https://bugs.mageia.org/show_bug.cgi?id=27654

- https://c-ares.org/changelog.html

Topics%20covered

Topics Covered

security advisory moderate buffer overflow heap overflow memory access c-ares Mageia mageia heap issues

Resolution

SRPMS

- 7/core/c-ares-1.17.1-1.mga7

Severity
medium
Lowest
Low
Medium
High
Critical

Publication date: 08 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0007.html
Type: security

Topics%20covered

Topics Covered

security advisory moderate buffer overflow heap overflow memory access c-ares Mageia mageia heap issues

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here