CVE-2024-25629
c-ares out of bounds read in ares__read_line()
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `/etc/hosts` file. If any of these configuration files has an embedded `NULL` character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.
c-ares es una librería C para solicitudes DNS asincrónicas. `ares__read_line()` se usa para analizar archivos de configuración locales como `/etc/resolv.conf`, `/etc/nsswitch.conf`, el archivo `HOSTALIASES` y si se usa una versión de c-ares anterior a 1.27. 0, el archivo `/etc/hosts`. Si alguno de estos archivos de configuración tiene un carácter "NULL" incrustado como primer carácter en una nueva línea, puede provocar que se intente leer la memoria antes del inicio del búfer dado, lo que puede provocar un bloqueo. Este problema se solucionó en c-ares 1.27.0. No existen workarounds.
A vulnerability was found in c-ares where the ares__read_line() is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.22.0, the /etc/hosts file. If the configuration files have an embedded NULL character as the first character in a new line, it can attempt to read memory before the start of the given buffer, which may result in a crash.
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2024-02-08 CVE Reserved
- 2024-02-23 CVE Published
- 2024-04-16 EPSS Updated
- 2024-08-01 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-127: Buffer Under-read
CAPEC
References (7)
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://access.redhat.com/security/cve/CVE-2024-25629 | 2024-07-23 | |
https://bugzilla.redhat.com/show_bug.cgi?id=2265713 | 2024-07-23 |