Lucene search
PRIOn knowledge basePRION:CVE-2016-5180HistoryOct 03, 2016 - 3:59 p.m.
Heap overflow
2016-10-0315:59:00
PRIOn knowledge base
www.prio-n.com
7
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
References
rhn.redhat.com/errata/RHSA-2017-0002.html
www.debian.org/security/2016/dsa-3682
www.securityfocus.com/bid/93243
www.ubuntu.com/usn/USN-3143-1
c-ares.haxx.se/adv_20160929.html
c-ares.haxx.se/CVE-2016-5180.patch
googlechromereleases.blogspot.in/2016/09/stable-channel-updates-for-chrome-os.html
security.gentoo.org/glsa/201701-28
source.android.com/security/bulletin/2017-01-01.html
Related
nessus
nessus
openSUSE Security Update : nodejs (openSUSE-2016-1277)
2016-11-10 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : c-ares vulnerability (USN-3143-1)
2016-12-01 00:00:00
Debian DLA-648-1 : c-ares security update
2016-10-07 00:00:00
openvas
openvas
Fedora Update for mingw-c-ares FEDORA-2016-66d9389548
2016-11-14 00:00:00
Fedora Update for nodejs FEDORA-2016-7a3a0f0198
2016-11-14 00:00:00
Fedora Update for c-ares FEDORA-2016-7aa3c89e7b
2016-11-14 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: nodejs-4.6.1-6.fc24
2016-10-30 17:56:01
[SECURITY] Fedora 25 Update: c-ares-1.12.0-1.fc25
2016-10-09 03:13:27
[SECURITY] Fedora 23 Update: mingw-c-ares-1.12.0-1.fc23
2016-10-10 01:20:23
ubuntucve
ubuntucve
CVE-2016-5180
2016-10-03 00:00:00
cve
cve
CVE-2016-5180
2016-10-03 15:59:03
osv
osv
CVE-2016-5180
2016-10-03 15:59:00
debian
debian
[SECURITY] [DSA 3682-1] c-ares security update
2016-09-30 19:49:24
[SECURITY] [DLA 648-1] c-ares security update
2016-10-06 18:55:52
cvelist
cvelist
CVE-2016-5180
2016-10-03 15:00:00
redhatcve
redhatcve
CVE-2016-5180
2016-09-29 16:47:23
gentoo
gentoo
c-ares: Heap-based buffer overflow
2017-01-11 00:00:00
freebsd
freebsd
node.js -- ares_create_query single byte out of buffer write
2016-10-18 00:00:00
ubuntu
ubuntu
c-ares vulnerability
2016-11-30 00:00:00
alpinelinux
alpinelinux
CVE-2016-5180
2016-10-03 15:59:03
archlinux
archlinux
[ASA-201609-31] c-ares: arbitrary code execution
2016-09-30 00:00:00
debiancve
debiancve
CVE-2016-5180
2016-10-03 15:59:03
mageia
mageia
Updated c-ares packages fix security vulnerability
2016-10-21 17:48:32
nvd
nvd
CVE-2016-5180
2016-10-03 15:59:03
chrome
chrome
Stable Channel Update for Chrome OS
2016-09-30 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities may affect IBM® SDK for Node.js™
2018-08-09 04:20:36
nodejsblog
nodejsblog
October security releases and v6 LTS "Boron" security inclusions
2016-10-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package c-ares version 1.13.0-alt1
2017-08-08 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1811
2021-07-02 16:34:46
redhat
redhat
threatpost
threatpost
androidsecurity
androidsecurity
Android Security Bulletin—January 2017
2017-01-03 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47