CVE-2026-33630highCWE-415CWE-416

CVE-2026-33630: falha de alta gravidade em c-ares

c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar c-ares+ Monitorar c-ares

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.8%
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple points in the resend/finish path (timeout handling, response handling, and query dispatch). If the query, or for ares_getaddrinfo() the owning host_query, is freed as a side effect of that callback, it is then accessed and/or freed a second time. This vulnerability is fixed in ver 1.34.7.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
c-ares · c-ares
CVEs relacionadas — c-ares

No mesmo produto, das mais perigosas para as menos.

CVE-2023-32067HIGH0-byte UDP payload DoS in c-aresEPSS 1.6%CVE-2023-31124LOWAutoTools does not set CARES_RANDOM_FILE during cross compilationEPSS 0.9%CVE-2023-31147MEDIUMInsufficient randomness in generation of DNS query IDs in c-aresEPSS 0.9%CVE-2025-31498HIGHc-ares has a use-after-free in read_answers()EPSS 0.6%CVE-2026-69184HIGHc-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chainsEPSS 0.5%CVE-2026-69186MEDIUMc-ares: Memory-amplification denial of service via unvalidated DNS header record countsEPSS 0.5%