tocsin

Alpine/c-ares: unknown

c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue a query either due to a DNS Cookie Failure or w

Action: Upgrade c-ares to 1.34.5-r0 or later.

Affected

introducedfixedlast affected
01.34.5-r0-

Fixed versions

1.34.5-r0

Sources

published · modified · JSON