Buffer overflow in C-Ares
CVE-2020-14354
A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.
EPSS exploit prediction
EPSS: 0.005 (42.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 42nd percentile — 42.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- C-Ares — versions 1.16.0
- Fedoraproject Fedora — versions 33
- C-Ares — versions c-ares 1.16.1
Weakness classification (CWE)
References
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (vendor-advisory)
- bugzilla.redhat.com/show_bug.cgi (Exploit, Patch, Third Party Advisory, Issue Tracking)
- packetstormsecurity.com/files/158755/GS20200804145053.txt (Exploit, VDB Entry, Third Party Advisory)
- c-ares.haxx.se/changelog.html (Release Notes, Vendor Advisory)
- github.com/c-ares/c-ares/commit/1cc7e83c3bdfaafbc5919c95025592d8de3a170e (Patch, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-14354?
- CVE-2020-14354 is a low-severity vulnerability in C-Ares, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 3.3/10. Published 2021-05-13.
- How severe is CVE-2020-14354?
- Low severity. CVSS v3 base score is 3.3 out of 10.