CVE-2016-5180 Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code v...
CriticalCVSS 9.8
EPSS 8.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/c-ares(Debian:12) | < 1.12.0-1 | 1.12.0-1 |
| debian/c-ares(Debian:13) | < 1.12.0-1 | 1.12.0-1 |
| debian/c-ares(Debian:14) | < 1.12.0-1 | 1.12.0-1 |
| c-ares | = 1.0.0 | No fix listed |
| c-ares | = 1.1.0 | No fix listed |
| c-ares | = 1.2.0 | No fix listed |
| c-ares | = 1.2.1 | No fix listed |
| c-ares | = 1.3.0 | No fix listed |
| c-ares | = 1.3.1 | No fix listed |
| c-ares | = 1.3.2 | No fix listed |
| c-ares | = 1.4.0 | No fix listed |
| c-ares | = 1.5.0 | No fix listed |
| c-ares | = 1.5.1 | No fix listed |
| c-ares | = 1.5.2 | No fix listed |
| c-ares | = 1.5.3 | No fix listed |
| c-ares | = 1.6.0 | No fix listed |
| c-ares | = 1.7.0 | No fix listed |
| c-ares | = 1.7.1 | No fix listed |
| c-ares | = 1.7.2 | No fix listed |
| c-ares | = 1.7.3 | No fix listed |
| c-ares | = 1.7.4 | No fix listed |
| c-ares | = 1.7.5 | No fix listed |
| c-ares | = 1.8.0 | No fix listed |
| c-ares | = 1.9.0 | No fix listed |
| c-ares | = 1.9.1 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| c-ares | = 1.10.0 | No fix listed |
| c-ares project c-ares | = 1.11.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| nodejs node.js | >= 0.10.0, < 0.10.48 | 0.10.48 |
| nodejs node.js | >= 0.12.0, < 0.12.17 | 0.12.17 |
| nodejs node.js | >= 4.0.0, < 4.6.1 | 4.6.1 |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.10 | No fix listed |
| alpine/c-ares(Alpine:v3.2) | < 1.12.0-r0 | 1.12.0-r0 |
| alpine/c-ares(Alpine:v3.3) | < 1.12.0-r0 | 1.12.0-r0 |
| alpine/c-ares(Alpine:v3.4) | < 1.12.0-r0 | 1.12.0-r0 |
| alpine/c-ares(Alpine:v3.5) | < 1.12.0-r0 | 1.12.0-r0 |
| alpine/c-ares(Alpine:v3.6) | < 1.12.0-r0 | 1.12.0-r0 |
| alpine/nodejs(Alpine:v3.6) | < 6.8.0-r0 | 6.8.0-r0 |
References
- Debian Security Tracker CVE-2016-5180 vendor-advisory
- RHSA-2017:0002 vendor-advisory
- DSA-3682 vendor-advisory
- 93243 vdb-entry
- USN-3143-1 vendor-advisory
- c-ares.haxx.se
- c-ares.haxx.se
- googlechromereleases.blogspot.in
- GLSA-201701-28 vendor-advisory
- source.android.com
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking