# c-ares.

Every CVE that names c-ares among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains](https://agentprime.io/advisories/CVE-2026-69184.md)
  `CVE-2026-69184` · CVE record: c-ares c-ares · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service
- [c-ares: Memory-amplification denial of service via unvalidated DNS header record counts](https://agentprime.io/advisories/CVE-2026-69186.md)
  `CVE-2026-69186` · CVE record: c-ares c-ares · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service
- [c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP](https://agentprime.io/advisories/CVE-2026-33630.md)
  `CVE-2026-33630` · CVE record: c-ares c-ares · CVSS 7.5 High · Not analysed yet · Published 3 Sept 2026 · Tags: Memory corruption
- [c-ares has a Use After Free vulnerability when connection is cleaned up after error](https://agentprime.io/advisories/CVE-2025-62408.md)
  `CVE-2025-62408` · CVE record: c-ares c-ares · CVSS 5.9 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: Memory corruption
- [c-ares has a use-after-free in read_answers()](https://agentprime.io/advisories/CVE-2025-31498.md)
  `CVE-2025-31498` · CVE record: c-ares c-ares · CVSS 8.3 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [c-ares out of bounds read in ares\_\_read_line()](https://agentprime.io/advisories/CVE-2024-25629.md)
  `CVE-2024-25629` · CVE record: c-ares c-ares · CVSS 4.4 Medium · Not analysed yet · Published 23 Feb 2024 · Tags: CWE-127
- [0-byte UDP payload DoS in c-ares](https://agentprime.io/advisories/CVE-2023-32067.md)
  `CVE-2023-32067` · CVE record: c-ares c-ares · CVSS 7.5 High · Not analysed yet · Published 25 May 2023 · Tags: Denial of service
- [Insufficient randomness in generation of DNS query IDs in c-ares](https://agentprime.io/advisories/CVE-2023-31147.md)
  `CVE-2023-31147` · CVE record: c-ares c-ares · CVSS 5.9 Medium · Not analysed yet · Published 25 May 2023 · Tags: Weak cryptography or TLS
- [Buffer Underwrite in ares_inet_net_pton()](https://agentprime.io/advisories/CVE-2023-31130.md)
  `CVE-2023-31130` · CVE record: c-ares c-ares · CVSS 4.1 Medium · Not analysed yet · Published 25 May 2023 · Tags: Memory corruption
- [AutoTools does not set CARES_RANDOM_FILE during cross compilation](https://agentprime.io/advisories/CVE-2023-31124.md)
  `CVE-2023-31124` · CVE record: c-ares c-ares · CVSS 3.7 Low · Not analysed yet · Published 25 May 2023 · Tags: Weak cryptography or TLS
- [Improper input validation in c-ares](https://agentprime.io/advisories/CVE-2022-4904.md)
  `CVE-2022-4904` · CVE record: c-ares · CVSS 8.6 High · Not analysed yet · Published 6 Mar 2023 · Tags: CWE-20
- [Cross-site scripting in c-ares](https://agentprime.io/advisories/CVE-2021-3672.md)
  `CVE-2021-3672` · CVE record: c-ares · No CVSS score · Not analysed yet · Published 23 Nov 2021 · Tags: Cross-site scripting (XSS)
- [Buffer overflow in c-ares](https://agentprime.io/advisories/CVE-2020-14354.md)
  `CVE-2020-14354` · CVE record: c-ares · No CVSS score · Not analysed yet · Published 13 May 2021 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=c-ares>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/c-ares/>. Everything for agents: <https://agentprime.io/llms.txt>.