Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-4904
HistoryMar 06, 2023 - 11:15 p.m.

Stack overflow

2023-03-0623:15:00
PRIOn knowledge base
www.prio-n.com
11
c-ares
arbitrary length
stack overflow
denial of service
confidentiality
integrity

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.2%

A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.