漏洞类别:Debian
漏洞等级:
漏洞信息
Debian has released security update for c-ares to fix the vulnerabilities.
漏洞危害
Heap-based buffer overflow in the ares_create_query function in c-ares allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
解决方案
Refer to Debian security advisory DSA 3682-1 to address this issue and obtain further details.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
0day
文章评论