Description
A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a c-ares
c-ares 1.16.1affected
References
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/ ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1866838 ↗
- https://packetstormsecurity.com/files/158755/GS20200804145053.txt ↗
- https://c-ares.haxx.se/changelog.html ↗
- https://github.com/c-ares/c-ares/commit/1cc7e83c3bdfaafbc5919c95025592d8de3a170e ↗