Ubuntu c-ares flaws can crash the library or run code
Original title: USN-8951-1: c-ares vulnerabilities
SOA reply parsing can crash c-ares on Ubuntu 16.04 LTS and 18.04 LTS; a sortlist bug can run code on 16.04.
Ubuntu security notice USN-8951-1 covers c-ares parsing flaws. CVE-2020-22217 can crash the library through certain SOA replies on Ubuntu 16.04 LTS and 18.04 LTS. CVE-2022-4904, limited to Ubuntu 16.04 LTS, can crash c-ares or execute arbitrary code via sortlist strings. A further DNS name-parsing issue is mentioned, but the notice text is cut off.
Unconfirmed: The snippet ends before any third CVE identifier and before fixed versions.
- CVE-2020-22217 affects only Ubuntu 16.04 LTS and 18.04 LTS.
- CVE-2022-4904 affects only Ubuntu 16.04 LTS and may allow code execution.
- The notice also describes unbounded DNS compression pointer hops before the text ends.
Impact: Denial of service, or code execution on Ubuntu 16.04 LTS
| Product | Affected |
|---|---|
| Ubuntu c-ares | Ubuntu 16.04 LTS and 18.04 LTS for CVE-2020-22217; Ubuntu 16.04 LTS for CVE-2022-4904 |
- 1.Install the updates published in USN-8951-1 on affected Ubuntu releases.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-22217 | Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c | 5.9 | <1% | PoC | |
| CVE-2022-4904 | c-ares package: The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack… | 8.6 | 1% | PoC |
From the original article
It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.