This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2022-4904 | BDVDB-2026-196751 Detail

c-ares

Description#

A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-20 Improper Input Validation

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.