Bug 2209502 (CVE-2023-32067)
| Summary: | CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Sandipan Roy <saroy> |
| Component: | vulnerability | Assignee: | Nobody <nobody> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | atikhono, hhorak, jorton, nodejs-maint |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: |
A vulnerability was found in c-ares. This issue occurs due to a 0-byte UDP payload that can cause a Denial of Service.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2209504, 2209505, 2209507, 2209508, 2209509, 2209510, 2209511, 2209503, 2209506, 2209512, 2209513, 2209514, 2209515, 2209516, 2209517, 2209518, 2209519, 2209520, 2209521, 2209522, 2209523, 2209524, 2209525, 2209526, 2209527, 2209528, 2209529, 2209530, 2209531, 2209532, 2209533, 2209534, 2209535, 2209536, 2209537, 2209538, 2214629 | ||
| Bug Blocks: | 2209110 | ||
|
Description
Sandipan Roy
2023-05-24 04:14:54 UTC
Created c-ares tracking bugs for this issue: Affects: fedora-all [bug 2209506] Created mingw-c-ares tracking bugs for this issue: Affects: fedora-all [bug 2209507] Created nodejs tracking bugs for this issue: Affects: epel-7 [bug 2209504] Created nodejs16 tracking bugs for this issue: Affects: fedora-all [bug 2209508] Created nodejs18 tracking bugs for this issue: Affects: fedora-all [bug 2209509] Created nodejs20 tracking bugs for this issue: Affects: fedora-all [bug 2209510] Created nodejs:13/nodejs tracking bugs for this issue: Affects: epel-8 [bug 2209505] Created nodejs:16/c-ares tracking bugs for this issue: Affects: fedora-all [bug 2209511] This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2023:3559 https://access.redhat.com/errata/RHSA-2023:3559 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2023:3577 https://access.redhat.com/errata/RHSA-2023:3577 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Extended Update Support Via RHSA-2023:3583 https://access.redhat.com/errata/RHSA-2023:3583 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2023:3584 https://access.redhat.com/errata/RHSA-2023:3584 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2023:3586 https://access.redhat.com/errata/RHSA-2023:3586 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Advanced Update Support Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions Red Hat Enterprise Linux 8.2 Telecommunications Update Service Via RHSA-2023:3660 https://access.redhat.com/errata/RHSA-2023:3660 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Extended Update Support Via RHSA-2023:3662 https://access.redhat.com/errata/RHSA-2023:3662 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions Via RHSA-2023:3665 https://access.redhat.com/errata/RHSA-2023:3665 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat Enterprise Linux 8.4 Telecommunications Update Service Via RHSA-2023:3677 https://access.redhat.com/errata/RHSA-2023:3677 This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2023:3741 https://access.redhat.com/errata/RHSA-2023:3741 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Extended Update Support Via RHSA-2023:4036 https://access.redhat.com/errata/RHSA-2023:4036 This issue has been addressed in the following products: Red Hat Software Collections for Red Hat Enterprise Linux 7 Via RHSA-2023:4039 https://access.redhat.com/errata/RHSA-2023:4039 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2023:4035 https://access.redhat.com/errata/RHSA-2023:4035 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2023:4034 https://access.redhat.com/errata/RHSA-2023:4034 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Extended Update Support Via RHSA-2023:4033 https://access.redhat.com/errata/RHSA-2023:4033 |