All vulnerabilities

Servers and applications

GHSA-grv7-fq5q-9vfc

c-ares can free a cached DNS answer while the application is still reading it

Severity
Medium 5.9
Published
20 Oct 2026
Last changed
20 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
1.34.9
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
c-aresServers and applications · github:c-ares/c-ares
  • From 1.28.0 before 1.34.9

References