GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-SU-2026:23414-1

Vulnerability from csaf_suse - Published: 2026-08-31 19:41 - Updated: 2026-09-17 16:20
Summary
Security update for c-ares
Severity
Important
Notes
Title of the patch: Security update for c-ares
Description of the patch: This update for c-ares fixes the following issues: Update to c-ares 1.34.8. - CVE-2025-31498: use-after-free in `read_answers()` when `process_answer()` may re-enqueue a query (bsc#1240955). - CVE-2025-62408: use-after-free due to connection being cleaned up after error (bsc#1254738). - CVE-2026-33630: remotely triggerable use-after-free/double-free in query-completion handling via `ares_getaddrinfo()` over TCP (bsc#1270416). - CVE-2026-69184: CPU exhaustion denial of service via unbounded DNS name compression pointer chains (bsc#1276290). - CVE-2026-69186: memory amplification denial of service via unvalidated DNS header record counts (bsc#1276291). Changes for c-ares: - c-ares 1.34.8: * For details, see https://c-ares.org/changelog.html. - c-ares 1.34.6: * Ignore Windows IDN Search Domains until proper IDN support is added. * Various bug fixes. - c-ares 1.34.4: * Changes: - QNX Port: Port to QNX 8, add primary config reading support, add CI build. PR #934, PR #937, PR #938 * Bugfixes: - Empty TXT records were not being preserved. PR #922 - `docs`: update deprecation notices for `ares_create_query()` and `ares_mkquery()`. PR #910 - `license`: some files weren't properly updated. PR #920 - Fix `bind` local device regression from 1.34.0. PR #929, PR #931, PR #935 - `CMake`: set policy version to prevent deprecation warnings. PR #932 - `CMake`: shared and static library names should be the same on unix platforms like `autotools` uses. PR #933 - Update to latest `autoconf` archive macros for enhanced system compatibility. PR #936 - c-ares 1.34.3: * Build the release package in an automated way so we can provide provenance as per SLSA3. PR #906 * Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. Issue #911 * TSAN warns on missing lock, but lock isn't actually necessary. PR #915 * `ares_getaddrinfo(`) for `AF_UNSPEC` should retry IPv4 if only IPv6 is received. 765d558 * `ares_send()` shouldn't return `ARES_EBADRESP`, its `ARES_EBADQUERY`. 91519e7 * Fix typos in man pages. PR #905 - c-ares 1.34.2: * Features: - `adig`: read arguments from `adigrc`. [PR #856] - Add new pending write callback optimization via `ares_set_pending_write_cb`. [PR #857] - New function `ares_process_fds()`. [PR #875] - Failed servers should be probed rather than redirecting queries which could cause unexpected latency. [PR #877] - `adig`: rework command line arguments to mimic `dig` from `bind`. [PR #890] - Add new method for overriding network functions `ares_set_socket_function_ex()` to properly support all new functionality. [PR #894] - Fix regression with custom socket callbacks due to DNS cookie support. [PR #895] - `ares_socket`: set `IP_BIND_ADDRESS_NO_PORT` on `ares_set_local_ip*` tcp sockets [PR #887] - URI parser/writer for `ares_set_servers_csv()`/`ares_get_servers_csv()`. [PR #882] - Connection handling modularization. [PR #857], [PR #876] - Expose library/utility functions to tools. [PR #860] - Remove `ares__` prefix, just use `ares_` for internal functions. [PR #872] - fix: potential `WIN32_LEAN_AND_MEAN` redefinition. [PR #869] - Fix `googletest` v1.15 compatibility. [PR #874] - Fix `pkgconfig` thread dependencies. [PR #884] - c-ares 1.33.0: * Add DNS cookie support (RFC7873 + RFC9018) to help prevent off-path cache poisoning attacks. [PR #833] * Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT on supported systems. [PR #840] * Reorganize source tree. [PR #822] * Refactoring of connection handling to prevent code duplication. [PR #839] * New dynamic array data structure to prevent simple logic flaws in array handling in various code paths. [PR #841] * `ares_destroy()` race condition during shutdown due to missing lock. [PR #831] - c-ares in 1.32: * Add support for DNS `0x20` to help prevent cache poisoning attacks, enabled by specifying `ARES_FLAG_DNS0x20`. Disabled by default. [PR #800] * Rework query timeout logic to automatically adjust timeouts based on network conditions. The timeout specified now is only used as a hint until there is enough history to calculate a more valid timeout. [PR #794] * DNS RR `TXT` strings should not be automatically concatenated as there are use cases outside of RFC 7208. In order to maintain ABI compliance, the ability to retrieve `TXT` strings concatenated is retained as well as a new API to retrieve the individual strings. This restores behavior from c-ares 1.20.0. [PR #801] * Clean up header inclusion logic to make hacking on code easier. [PR #797] * GCC/Clang: Enable even more strict warnings to catch more coding flaws. [253bdee] * Tests: Fix thread race condition in test cases for `EventThread`. [PR #803] * Thread Saftey: `ares_timeout()` was missing lock. [74a64e4] - c-ares 1.31.0: * Enable Query Cache by default. [PR #786] * Enhance Windows DNS configuration change detection to also detect manual DNS configuration changes. [PR #785] * Various legacy MacOS Build fixes. [Issue #782] * Ndots value of zero in `resolv.conf` was not being honored. [852a60a] * Watt-32 build support had been broken for some time. [PR #781] * Distribute `ares_dns_rec_type_tostr` manpage. [PR #778] - c-ares 1.30.0: * Basic support for SIG RR record (RFC 2931 / RFC 2535) [PR #773] * Validation that DNS strings can only consist of printable ascii characters otherwise will trigger a parse failure. [75de16c] and [40fb125] * `QueryCache`: Fix issue where purging on server changes wasn't working. [a6c8fe6] - c-ares 1.29.0: * When using `ARES_OPT_EVENT_THREAD`, automatically reload system configuration when network conditions change. [PR #759] * Apple: reimplement DNS configuration reading to more accurately pull DNS settings. [PR #750] * Add observability into DNS server health via a server state callback, invoked whenever a query finishes. [PR #744] * Add server failover retry behavior, where failed servers are retried with small probability after a minimum delay. [PR #731] * Mark `ares_channel_t *` as `const` in more places in the public API. [PR #758] * Due to a logic flaw, dns name compression writing was not properly implemented which would result in the name prefix not being written for a partial match. This could cause issues in various record types such as `MX` records when using the deprecated API. Regression introduced in 1.28.0. [Issue #757] * Revert OpenBSD `SOCK_DNS` flag, it doesn't do what the docs say it does and causes c-ares to become non-functional. [PR #754] * `ares_getnameinfo()`: loosen validation on `salen` parameter. [Issue #752] * `cmake`: Android requires C99. [PR #748] * `ares_queue_wait_empty()` does not honor `timeout_ms >= 0`. [Issue #742] - c-ares 1.28.1: * Emit warnings when deprecated c-ares functions are used. This can be disabled by passing a compiler definition of `CARES_NO_DEPRECATED`. [PR #732] * Add function `ares_search_dnsrec()` to search for records using the new DNS record data structures. [PR #719] * Rework internals to pass around `ares_dns_record_t` instead of binary data, this introduces new public functions of `ares_query_dnsrec()` and `ares_send_dnsrec()`. [PR #730] * tests: when performing simulated queries, reduce timeouts to make tests run faster. * Replace configuration file parsers with memory-safe parser. [PR #725] * Remove `acountry` completely, the manpage might still get installed otherwise. [Issue #718] * CMake: don't overwrite global required libraries/definitions/includes which could cause build errors for projects chain building c-ares. [Issue #729] * On some platforms, `netinet6/in6.h` is not included by `netinet/in.h` and needs to be included separately. [PR #728] * Fix a potential memory leak in `ares_init()`. [Issue #724] * Some platforms don't have the `isascii()` function. Implement as a macro. [PR #721] * CMake: Fix chain building if `CMAKE` runtime paths not set. * NDots configuration should allow a value of zero. [PR #735]
Patchnames: SUSE-SLE-Micro-6.1-696
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2025-31498
6.5 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2025-62408
5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2025-31498
Threats
Impact moderate
CVE-2026-33630
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2025-31498
Threats
Impact important
CVE-2026-69184
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2025-31498
Threats
Impact important
CVE-2026-69186
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2025-31498
Threats
Impact moderate
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for c-ares",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for c-ares fixes the following issues:\n\nUpdate to c-ares 1.34.8.\n\n- CVE-2025-31498: use-after-free in `read_answers()` when `process_answer()` may re-enqueue a query (bsc#1240955).\n- CVE-2025-62408: use-after-free due to connection being cleaned up after error (bsc#1254738).\n- CVE-2026-33630: remotely triggerable use-after-free/double-free in query-completion handling via `ares_getaddrinfo()`\n  over TCP (bsc#1270416).\n- CVE-2026-69184: CPU exhaustion denial of service via unbounded DNS name compression pointer chains (bsc#1276290).\n- CVE-2026-69186: memory amplification denial of service via unvalidated DNS header record counts (bsc#1276291).\n\nChanges for c-ares:\n\n- c-ares 1.34.8:\n  * For details, see https://c-ares.org/changelog.html.\n- c-ares 1.34.6:\n  * Ignore Windows IDN Search Domains until proper IDN support is added.\n  * Various bug fixes.\n- c-ares 1.34.4:\n  * Changes:\n    -  QNX Port: Port to QNX 8, add primary config reading support, add CI build. PR #934, PR #937, PR #938\n  * Bugfixes:\n    - Empty TXT records were not being preserved. PR #922\n    - `docs`: update deprecation notices for `ares_create_query()` and `ares_mkquery()`. PR #910\n    - `license`: some files weren\u0027t properly updated. PR #920\n    - Fix `bind` local device regression from 1.34.0. PR #929, PR #931, PR #935\n    - `CMake`: set policy version to prevent deprecation warnings. PR #932\n    - `CMake`: shared and static library names should be the same on unix platforms like `autotools` uses. PR #933\n    - Update to latest `autoconf` archive macros for enhanced system compatibility. PR #936\n- c-ares 1.34.3:\n  * Build the release package in an automated way so we can provide provenance as per SLSA3. PR #906\n  * Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. Issue #911\n  * TSAN warns on missing lock, but lock isn\u0027t actually necessary. PR #915\n  * `ares_getaddrinfo(`) for `AF_UNSPEC` should retry IPv4 if only IPv6 is received. 765d558\n  * `ares_send()` shouldn\u0027t return `ARES_EBADRESP`, its `ARES_EBADQUERY`. 91519e7\n  * Fix typos in man pages. PR #905\n- c-ares 1.34.2:\n  * Features:\n    - `adig`: read arguments from `adigrc`. [PR #856]\n    - Add new pending write callback optimization via `ares_set_pending_write_cb`. [PR #857]\n    - New function `ares_process_fds()`. [PR #875]\n    - Failed servers should be probed rather than redirecting queries which could cause unexpected latency. [PR #877]\n    - `adig`: rework command line arguments to mimic `dig` from `bind`. [PR #890]\n    - Add new method for overriding network functions `ares_set_socket_function_ex()` to properly support all new\n      functionality. [PR #894]\n    - Fix regression with custom socket callbacks due to DNS cookie support. [PR #895]\n    - `ares_socket`: set `IP_BIND_ADDRESS_NO_PORT` on `ares_set_local_ip*` tcp sockets [PR #887]\n    - URI parser/writer for `ares_set_servers_csv()`/`ares_get_servers_csv()`. [PR #882]\n    - Connection handling modularization. [PR #857], [PR #876]\n    - Expose library/utility functions to tools. [PR #860]\n    - Remove `ares__` prefix, just use `ares_` for internal functions. [PR #872]\n    - fix: potential `WIN32_LEAN_AND_MEAN` redefinition. [PR #869]\n    - Fix `googletest` v1.15 compatibility. [PR #874]\n    - Fix `pkgconfig` thread dependencies. [PR #884]\n- c-ares 1.33.0:\n  * Add DNS cookie support (RFC7873 + RFC9018) to help prevent off-path cache poisoning attacks. [PR #833]\n  * Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT on supported systems. [PR #840]\n  * Reorganize source tree. [PR #822]\n  * Refactoring of connection handling to prevent code duplication. [PR #839]\n  * New dynamic array data structure to prevent simple logic flaws in array handling in various code paths. [PR #841]\n  * `ares_destroy()` race condition during shutdown due to missing lock. [PR #831]\n- c-ares in 1.32:\n  * Add support for DNS `0x20` to help prevent cache poisoning attacks, enabled by specifying `ARES_FLAG_DNS0x20`.\n    Disabled by default. [PR #800]\n  * Rework query timeout logic to automatically adjust timeouts based on network conditions. The timeout specified now\n    is only used as a hint until there is enough history to calculate a more valid timeout. [PR #794]\n  * DNS RR `TXT` strings should not be automatically concatenated as there are use cases outside of RFC 7208. In order\n    to maintain ABI compliance, the ability to retrieve `TXT` strings concatenated is retained as well as a new API to\n    retrieve the individual strings. This restores behavior from c-ares 1.20.0. [PR #801]\n  * Clean up header inclusion logic to make hacking on code easier. [PR #797]\n  * GCC/Clang: Enable even more strict warnings to catch more coding flaws. [253bdee]\n  * Tests: Fix thread race condition in test cases for `EventThread`. [PR #803]\n  * Thread Saftey: `ares_timeout()` was missing lock. [74a64e4]\n- c-ares 1.31.0:\n  * Enable Query Cache by default. [PR #786]\n  * Enhance Windows DNS configuration change detection to also detect manual DNS configuration changes. [PR #785]\n  * Various legacy MacOS Build fixes. [Issue #782]\n  * Ndots value of zero in `resolv.conf` was not being honored. [852a60a]\n  * Watt-32 build support had been broken for some time. [PR #781]\n  * Distribute `ares_dns_rec_type_tostr` manpage. [PR #778]\n- c-ares 1.30.0:\n  * Basic support for SIG RR record (RFC 2931 / RFC 2535) [PR #773]\n  * Validation that DNS strings can only consist of printable ascii characters otherwise will trigger a parse failure.\n    [75de16c] and [40fb125]\n  * `QueryCache`: Fix issue where purging on server changes wasn\u0027t working. [a6c8fe6]\n- c-ares 1.29.0:\n  * When using `ARES_OPT_EVENT_THREAD`, automatically reload system configuration when network conditions change.\n    [PR #759]\n  * Apple: reimplement DNS configuration reading to more accurately pull DNS settings. [PR #750]\n  * Add observability into DNS server health via a server state callback, invoked whenever a query finishes. [PR #744]\n  * Add server failover retry behavior, where failed servers are retried with small probability after a minimum delay.\n    [PR #731]\n  * Mark `ares_channel_t *` as `const` in more places in the public API. [PR #758]\n  * Due to a logic flaw, dns name compression writing was not properly implemented which would result in the name prefix\n    not being written for a partial match. This could cause issues in various record types such as `MX` records when\n    using the deprecated API. Regression introduced in 1.28.0. [Issue #757]\n  * Revert OpenBSD `SOCK_DNS` flag, it doesn\u0027t do what the docs say it does and causes c-ares to become non-functional.\n    [PR #754]\n  * `ares_getnameinfo()`: loosen validation on `salen` parameter. [Issue #752]\n  * `cmake`: Android requires C99. [PR #748]\n  * `ares_queue_wait_empty()` does not honor `timeout_ms \u003e= 0`. [Issue #742]\n- c-ares 1.28.1:\n  * Emit warnings when deprecated c-ares functions are used. This can be disabled by passing a compiler definition of\n   `CARES_NO_DEPRECATED`. [PR #732]\n  * Add function `ares_search_dnsrec()` to search for records using the new DNS record data structures. [PR #719]\n  * Rework internals to pass around `ares_dns_record_t` instead of binary data, this introduces new public functions of\n    `ares_query_dnsrec()` and `ares_send_dnsrec()`. [PR #730]\n  * tests: when performing simulated queries, reduce timeouts to make tests run faster.\n  * Replace configuration file parsers with memory-safe parser. [PR #725]\n  * Remove `acountry` completely, the manpage might still get installed otherwise. [Issue #718]\n  * CMake: don\u0027t overwrite global required libraries/definitions/includes which could cause build errors for projects\n    chain building c-ares. [Issue #729]\n  * On some platforms, `netinet6/in6.h` is not included by `netinet/in.h` and needs to be included separately. [PR #728]\n  * Fix a potential memory leak in `ares_init()`. [Issue #724]\n  * Some platforms don\u0027t have the `isascii()` function. Implement as a macro. [PR #721]\n  * CMake: Fix chain building if `CMAKE` runtime paths not set.\n  * NDots configuration should allow a value of zero. [PR #735]\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.1-696",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23414-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:23414-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623414-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:23414-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-September/028848.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1240955",
        "url": "https://bugzilla.suse.com/1240955"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254738",
        "url": "https://bugzilla.suse.com/1254738"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1270416",
        "url": "https://bugzilla.suse.com/1270416"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276290",
        "url": "https://bugzilla.suse.com/1276290"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276291",
        "url": "https://bugzilla.suse.com/1276291"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-31498 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-31498/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-62408 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-62408/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33630 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33630/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-69184 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-69184/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-69186 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-69186/"
      }
    ],
    "title": "Security update for c-ares",
    "tracking": {
      "current_release_date": "2026-09-17T16:20:20Z",
      "generator": {
        "date": "2026-08-31T19:41:34Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:23414-1",
      "initial_release_date": "2026-08-31T19:41:34Z",
      "revision_history": [
        {
          "date": "2026-08-31T19:41:34Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T19:28:25Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T20:15:40Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-17T16:20:20Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
                "product": {
                  "name": "libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
                  "product_id": "libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:c-ares_project:c-ares:1.34.8:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libcares2@1.34.8-slfo.1.1_1.1?arch=aarch64\u0026upstream=c-ares-0:1.34.8-slfo.1.1_1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
                "product": {
                  "name": "libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
                  "product_id": "libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:c-ares_project:c-ares:1.34.8:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libcares2@1.34.8-slfo.1.1_1.1?arch=ppc64le\u0026upstream=c-ares-0:1.34.8-slfo.1.1_1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
                "product": {
                  "name": "libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
                  "product_id": "libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:c-ares_project:c-ares:1.34.8:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libcares2@1.34.8-slfo.1.1_1.1?arch=s390x\u0026upstream=c-ares-0:1.34.8-slfo.1.1_1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libcares2-0:1.34.8-slfo.1.1_1.1.x86_64",
                "product": {
                  "name": "libcares2-0:1.34.8-slfo.1.1_1.1.x86_64",
                  "product_id": "libcares2-0:1.34.8-slfo.1.1_1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:c-ares_project:c-ares:1.34.8:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libcares2@1.34.8-slfo.1.1_1.1?arch=x86_64\u0026upstream=c-ares-0:1.34.8-slfo.1.1_1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.1",
                "product": {
                  "name": "SUSE Linux Micro 6.1",
                  "product_id": "SUSE Linux Micro 6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcares2-0:1.34.8-slfo.1.1_1.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64"
        },
        "product_reference": "libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le"
        },
        "product_reference": "libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcares2-0:1.34.8-slfo.1.1_1.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x"
        },
        "product_reference": "libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcares2-0:1.34.8-slfo.1.1_1.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
        },
        "product_reference": "libcares2-0:1.34.8-slfo.1.1_1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-31498",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-31498"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue a query either due to a DNS Cookie Failure or when the upstream server does not properly support EDNS, or possibly on TCP queries if the remote closed the connection immediately after a response. If there was an issue trying to put that new transaction on the wire, it would close the connection handle, but read_answers() was still expecting the connection handle to be available to possibly dequeue other responses. In theory a remote attacker might be able to trigger this by flooding the target with ICMP UNREACHABLE packets if they also control the upstream nameserver and can return a result with one of those conditions, this has been untested. Otherwise only a local attacker might be able to change system behavior to make send()/write() return a failure condition. This vulnerability is fixed in 1.34.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-31498",
          "url": "https://www.suse.com/security/cve/CVE-2025-31498"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1240955 for CVE-2025-31498",
          "url": "https://bugzilla.suse.com/1240955"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270416 for CVE-2025-31498",
          "url": "https://bugzilla.suse.com/1270416"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-31T19:41:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-31498"
    },
    {
      "cve": "CVE-2025-62408",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-62408"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5  terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-62408",
          "url": "https://www.suse.com/security/cve/CVE-2025-62408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254738 for CVE-2025-62408",
          "url": "https://bugzilla.suse.com/1254738"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-31T19:41:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-62408"
    },
    {
      "cve": "CVE-2026-33630",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33630"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares\u0027 query-completion handling. The same flaw - a query\u0027s callback being invoked while the query is still linked in the channel\u0027s internal lookup structures - is present at multiple points in the resend/finish path (timeout handling, response handling, and query dispatch). If the query, or for ares_getaddrinfo() the owning host_query, is freed as a side effect of that callback, it is then accessed and/or freed a second time. This vulnerability is fixed in ver 1.34.7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33630",
          "url": "https://www.suse.com/security/cve/CVE-2026-33630"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270416 for CVE-2026-33630",
          "url": "https://bugzilla.suse.com/1270416"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-31T19:41:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33630"
    },
    {
      "cve": "CVE-2026-69184",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-69184"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-69184",
          "url": "https://www.suse.com/security/cve/CVE-2026-69184"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276290 for CVE-2026-69184",
          "url": "https://bugzilla.suse.com/1276290"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-31T19:41:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-69184"
    },
    {
      "cve": "CVE-2026-69186",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-69186"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-69186",
          "url": "https://www.suse.com/security/cve/CVE-2026-69186"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276291 for CVE-2026-69186",
          "url": "https://bugzilla.suse.com/1276291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libcares2-0:1.34.8-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-31T19:41:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-69186"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.