Product by Debian
C-ares
6 known vulnerabilities in C-ares (Debian), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2016-5180 | C-ares: Heap-Based Buffer Overflow | 9.8 | |
| Medium | CVE-2021-3672 | C-ares: Cross-site Scripting | 5.6 | |
| High | CVE-2023-32067 | 0-byte UDP payload DoS in c-ares | 7.5 | |
| Medium | CVE-2020-22217 | C-ares: Buffer Overflow | 5.9 | |
| Medium | CVE-2025-62408 | c-ares has a Use After Free vulnerability when connection is cleaned up after error | 5.9 | |
| Medium | CVE-2023-31130 | Buffer Underwrite in ares_inet_net_pton() | 4.1 |