Oval Definition:oval:org.cisecurity:def:1276
Revision Date:2016-11-25Version:6
Title:DSA-3682-1 -- c-ares -- security update
Description:Gzob Qq discovered that the query-building functions in c-ares, an asynchronous DNS request library would not correctly process crafted query names, resulting in a heap buffer overflow and potentially leading to arbitrary code execution.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2016-5180
DSA-3682-1
Platform(s):Debian 8
Product(s):c-ares
Definition Synopsis
  • Debian 8 is installed
  • AND c-ares is earlier than 0:1.10.0-2+deb8u1
  • BACK