Boletines de Vulnerabilidades

DSA-3682 c-ares - security update

   
Software afectado Debian
 
Gzob Qq discovered that the query-building functions in c-ares, anasynchronous DNS request library would not correctly process craftedquery names, resulting in a heap buffer overflow and potentiallyleading to arbitrary code execution.

More info:

https://www.debian.org/security/2016/dsa-3682