FlawAtlas
Search the atlas
SUSE-SU-2023:2313-1 Not scored

Security update for c-ares

This update for c-ares fixes the following issues: Update to version 1.19.1: - CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604) - CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605) - CVE-2023-31130: Buffer Underwrite in ares_inet_net_pton() (bsc#1211606) - CVE-2023-31124: AutoTools does not set CARES_RANDOM_FILE during cross compilation (bsc#1211607) - Fix uninitialized memory warning in test - ares_getaddrinfo() should allow a port of 0 - Fix memory leak in ares_send() on error - Fix comment style in ares_data.h - Fix typo in ares_init_options.3 - Sync ax_pthread.m4 with upstream - Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support

Exploit probability Not scored
Published May 30, 2023
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 7 c-ares
SUSE:Enterprise Storage 7.1 c-ares
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS c-ares
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS c-ares
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS c-ares
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS c-ares
SUSE:Linux Enterprise Micro 5.1 c-ares
SUSE:Linux Enterprise Micro 5.2 c-ares
SUSE:Linux Enterprise Micro 5.3 c-ares
SUSE:Linux Enterprise Micro 5.4 c-ares
SUSE:Linux Enterprise Module for Basesystem 15 SP4 c-ares
SUSE:Linux Enterprise Module for Basesystem 15 SP5 c-ares
SUSE:Linux Enterprise Real Time 15 SP3 c-ares
SUSE:Linux Enterprise Server 15 SP1-LTSS c-ares
SUSE:Linux Enterprise Server 15 SP2-LTSS c-ares
SUSE:Linux Enterprise Server 15 SP3-LTSS c-ares
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 c-ares
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 c-ares
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 c-ares
SUSE:Manager Proxy 4.2 c-ares
SUSE:Manager Server 4.2 c-ares
openSUSE:Leap 15.4 c-ares
openSUSE:Leap 15.5 c-ares
openSUSE:Leap Micro 5.3 c-ares

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2023:2313-1

This update for c-ares fixes the following issues: Update to version 1.19.1: - CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604) - CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605) - CVE-2023-31130: Buffer Underwrite in ares_inet_net_pton() (bsc#1211606) - CVE-2023-31124: AutoTools does not set CARES_RANDOM_FILE during cross compilation (bsc#1211607) - Fix uninitialized memory warning in test - ares_getaddrinfo() should allow a port of 0 - Fix memory leak in ares_send() on error - Fix comment style in ares_data.h - Fix typo in ares_init_options.3 - Sync ax_pthread.m4 with upstream - Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support

View original source

05 / REFERENCES

Further evidence