Search for packages
Package details: pkg:alpm/archlinux/c-ares@1.16.1-2
purl pkg:alpm/archlinux/c-ares@1.16.1-2
Next non-vulnerable version 1.17.2-1
Latest non-vulnerable version 1.17.2-1
Risk 3.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-3euu-x4gm-aaah
Aliases:
CVE-2020-8277
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and 12.19.1.
1.17.1-1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:48.871731+00:00 Arch Linux Importer Affected by VCID-3euu-x4gm-aaah https://security.archlinux.org/AVG-1280 36.0.0
2024-12-20T03:18:59.294937+00:00 Arch Linux Importer Affected by VCID-3euu-x4gm-aaah https://security.archlinux.org/AVG-1280 35.0.0
2024-09-18T02:02:09.695907+00:00 Arch Linux Importer Affected by VCID-3euu-x4gm-aaah https://security.archlinux.org/AVG-1280 34.0.1
2024-08-12T09:47:34.549405+00:00 Arch Linux Importer Affected by VCID-3euu-x4gm-aaah https://security.archlinux.org/AVG-1280 34.0.0rc4
2024-01-03T22:28:12.140604+00:00 Arch Linux Importer Affected by VCID-3euu-x4gm-aaah https://security.archlinux.org/AVG-1280 34.0.0rc1