All vulnerabilities

Servers and applications

GHSA-v33j-65h4-4ch8

c-ares can use freed memory when an application cancels lookups from a server-status callback

Severity
Medium 5.9
Published
20 Oct 2026
Last changed
20 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
1.34.9
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
c-aresServers and applications · github:c-ares/c-ares
  • From 1.29.0 before 1.34.9

References