Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.

The version of grpc / python-gevent installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-22217 advisory.

  - Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in     ares_parse_soa_reply.c. (CVE-2020-22217)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of grpc / python-gevent installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-22217 advisory.

  - Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in     ares_parse_soa_reply.c. (CVE-2020-22217)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:7207 advisory.

  - Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in     ares_parse_soa_reply.c. (CVE-2020-22217)

  - c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for     certain ipv6 addresses, in particular 0::00:00:00/2 was found to cause an issue. C-ares only uses this     function internally for configuration purposes which would require an administrator to configure such an     address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes     and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1. (CVE-2023-31130)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0578 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: Heap buffer over read in ares_parse_soa_reply (CVE-2020-22217)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0419 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: Heap buffer over read in ares_parse_soa_reply (CVE-2020-22217)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:7207 advisory.

  - Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in     ares_parse_soa_reply.c. (CVE-2020-22217)

  - c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for     certain ipv6 addresses, in particular 0::00:00:00/2 was found to cause an issue. C-ares only uses this     function internally for configuration purposes which would require an administrator to configure such an     address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes     and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1. (CVE-2023-31130)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7207 advisory.

    [1.13.0-9.1]
    - Resolves: RHEL-11931 - Buffer Underwrite in ares_inet_net_pton() [rhel-8.9.0.z]

    [1.13.0-9]
    - Resolves: rhbz#2238293 - CVE-2020-22217 c-ares: read-heap-buffer-overflow in ares_parse_soa_reply     [rhel-8] [rhel-8.9.0.z]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7207 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: Heap buffer over read in ares_parse_soa_reply (CVE-2020-22217)

    * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3690-1 advisory.

  - Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in     ares_parse_soa_reply.c. (CVE-2020-22217)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6376-1 advisory.

    It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use     this issue to cause c-res to crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3567 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3567-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Anton Gladky     September 15, 2023                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : c-ares     Version        : 1.14.0-1+deb10u4     CVE ID         : CVE-2020-22217

    A vulnerability has been identified in c-ares, an asynchronous name     resolver library:

    CVE-2020-22217:

        A buffer overflow vulnerability has been found in c-ares before         via the function ares_parse_soa_reply in ares_parse_soa_reply.c.
        This vulnerability was discovered through fuzzing. Exploitation         of this vulnerability may allow an attacker to execute arbitrary         code or cause a denial of service condition.

    For Debian 10 buster, this problem has been fixed in version     1.14.0-1+deb10u4.

    We recommend that you upgrade your c-ares packages.

    For the detailed security status of c-ares please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/c-ares

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
215561	Azure Linux 3.0 Security Update: grpc / python-gevent (CVE-2020-22217)	Nessus	Azure Linux Local Security Checks	medium
201764	CBL Mariner 2.0 Security Update: grpc / python-gevent (CVE-2020-22217)	Nessus	MarinerOS Local Security Checks	medium
190217	CentOS 8 : c-ares (CESA-2023:7207)	Nessus	CentOS Local Security Checks	medium
189820	RHEL 8 : c-ares (RHSA-2024:0578)	Nessus	Red Hat Local Security Checks	medium
189574	RHEL 8 : c-ares (RHSA-2024:0419)	Nessus	Red Hat Local Security Checks	medium
186397	Rocky Linux 8 : c-ares (RLSA-2023:7207)	Nessus	Rocky Linux Local Security Checks	medium
186199	Oracle Linux 8 : c-ares (ELSA-2023-7207)	Nessus	Oracle Linux Local Security Checks	medium
185701	RHEL 8 : c-ares (RHSA-2023:7207)	Nessus	Red Hat Local Security Checks	medium
181737	SUSE SLED12 / SLES12 Security Update : libcares2 (SUSE-SU-2023:3690-1)	Nessus	SuSE Local Security Checks	medium
181540	Ubuntu 20.04 LTS : c-ares vulnerability (USN-6376-1)	Nessus	Ubuntu Local Security Checks	medium
181511	Debian dla-3567 : libc-ares-dev - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2020-22217

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium