CVE-2026-69184highCWE-407

CVE-2026-69184: falha de alta gravidade em c-ares

c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar c-ares+ Monitorar c-ares

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.5%
c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource records whose NAME or RDATA fields refer to the chain, causing repeated decompression work that grows quadratically with message size. A single crafted response can stall the single-threaded c-ares event loop and deny DNS resolution, without causing memory corruption or information disclosure. This issue is fixed in version 1.34.7.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
c-ares · c-ares
CVEs relacionadas — c-ares

No mesmo produto, das mais perigosas para as menos.

CVE-2023-32067HIGH0-byte UDP payload DoS in c-aresEPSS 1.6%CVE-2023-31124LOWAutoTools does not set CARES_RANDOM_FILE during cross compilationEPSS 0.9%CVE-2023-31147MEDIUMInsufficient randomness in generation of DNS query IDs in c-aresEPSS 0.9%CVE-2026-33630HIGHc-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCPEPSS 0.8%CVE-2025-31498HIGHc-ares has a use-after-free in read_answers()EPSS 0.6%CVE-2026-69186MEDIUMc-ares: Memory-amplification denial of service via unvalidated DNS header record countsEPSS 0.5%