CVE:CVE-2022-4904
CNNVD:CNNVD-202302-1617
c-ares是c-ares个人开发者的一个用于异步 DNS 请求的 C 库。
c-ares存在安全漏洞，该漏洞源于缺少对输入字符串有效性的检查，攻击者利用该漏洞可能导致任意长度的堆栈溢出，从而导致拒绝服务。
solution:Upgrade c-ares_project c-ares to a higher version than 1.19.0,and avoid the version (,1.19.0); Upgrade redhat software_collections to a higher version than -; Upgrade redhat enterprise_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade fedoraproject fedora to a higher version than 36,and avoid the version 36