CoreCVE
Back

HIGH

c-ares: buffer overflow in config_sortlist() due to missing string length check

Published Mar 6, 2023

Description

A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.

Affected products

Remediation

Red Hat statement

The severity of this vulnerability is not important but moderate because exploiting the vulnerability can lead to a disruption of the availability of an application, yet doesn’t compromise data integrity or confidentiality. The opportunity for disruption is further limited due to the requirement that an application allows an attacker to be able to input both untrusted and unvalidated data. Exploiting this flaw requires an application to use the library in such a way that would allow untrusted and unvalidated input to be passed directly to ares_set_sortlist by an attacker. In the event that this is able to occur, the impact to RHEL is limited to a crash of the application due to the protections offered by default in RHEL systems such as Stack Smashing Protection (SSP).

Weaknesses (3)

CWE-1284

CWE-20

Improper Input Validation

CWE-805

References (7)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Mar 6, 2023
Updated Dec 2, 2025
Reserved Feb 9, 2023
Link CVE-2022-4904
CISA Vulnrichment
Updated Dec 2, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-4904
Red Hat
Severity Moderate
Public date Dec 13, 2022
Links CVE-2022-4904 - Bugzilla