All vulnerabilities

Servers and applications

CVE-2024-25629

c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `/etc/hosts` file. If any of these configuration files has an embedded `NULL` character as the first character in a new line, it can lead to attempting to…

Severity
Medium 5.5
Published
23 Feb 2024
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Fixed in
1.27.0
Sources
NVD

Affected software

SoftwareAffected versions
c-aresServers and applications · cpe:a:c-ares:c-ares
  • Every version before 1.27.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-25629
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-25629