{"action":"Upgrade c-ares to 1.18.1-3 or later.","affected":[{"fixed":"1.18.1-3","introduced":"0"}],"component":"c-ares","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1.18.1-3"],"id":"tcs_01M5NJ2DPJ6YRXGFAE3PSYJ8FR","modified_at":"2026-10-23T18:04:52.921015602Z","published_at":"2023-05-25T23:15:09.380Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-32067","https://security-tracker.debian.org/tracker/CVE-2023-32067"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-32067#Debian:13/c-ares","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-32067"}],"summary":"c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns the"}