All vulnerabilities

Servers and applications

GHSA-rf6g-ww74-97qh

c-ares can use freed memory if an application cancels lookups from a callback, or shuts a channel down

Severity
Medium 5.9
Published
20 Oct 2026
Last changed
20 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
1.34.9
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
c-aresServers and applications · github:c-ares/c-ares
  • Every version before 1.34.9

References