[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f70Yq-m4EcRMtXTNz_U-2yYzP2dvtEUlmoPkZNS1N6xM":3,"g5a-risk:CVE-2024-25629":156},{"success":4,"data":5,"meta":153},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":29,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":56,"references":57,"referencesCount":88,"weaknesses":89,"weaknessesCount":104,"isActivelyExploited":105,"cisaInfo":29,"otxData":29,"relatedBlogPosts":106,"seoMetadata":107,"configurations":132,"relatedVendorCves":151,"notableEvents":152},"CVE-2024-25629","What is CVE-2024-25629?","c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `\u002Fetc\u002Fresolv.conf`, `\u002Fetc\u002Fnsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `\u002Fetc\u002Fhosts` file. If any of these configuration files has an embedded `NULL` character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.","c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `\u002Fetc\u002Fresolv.conf`, `\u002Fetc\u002Fnsswitc...","2024-02-23T15:15:09.237","2025-02-05T21:41:30.157",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":29,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":24,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","LOCAL","LOW","HIGH","NONE","UNCHANGED",4.4,"MEDIUM",null,0.8,3.6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":36,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":24,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},1.8,0.00349,[37,37,37,37,37,37,37],"Medium",[41,45,50,53],{"vendor":42,"product":42,"version":43,"criteria":44,"vulnerable":4},"c-ares","*","cpe:2.3:a:c-ares:c-ares:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"fedoraproject","fedora","38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":51,"criteria":52,"vulnerable":4},"39","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":54,"criteria":55,"vulnerable":4},"40","cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*",4,[58,63,67,72,75,78,80,82,84,86],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fgithub.com\u002Fc-ares\u002Fc-ares\u002Fcommit\u002Fa804c04ddc8245fc8adf0e92368709639125e183","GitHub",[62],"Patch",{"url":64,"source":60,"tags":65},"https:\u002F\u002Fgithub.com\u002Fc-ares\u002Fc-ares\u002Fsecurity\u002Fadvisories\u002FGHSA-mg26-v6qh-x48q",[66],"Vendor Advisory",{"url":68,"source":69,"tags":70},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F2P76QYINQNPEHUTEEDOUYIRZ2X6UVZ5K\u002F","Fedoraproject",[71],"Mailing List",{"url":73,"source":69,"tags":74},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FCSCMTSPDIE2UHU34TIXQQHZ6JTE3Y3VF\u002F",[71],{"url":76,"source":69,"tags":77},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGX37LFPFQ3T6FFMMFYQTEGIQXXN7F27U\u002F",[71],{"url":59,"source":60,"tags":79},[62],{"url":64,"source":60,"tags":81},[66],{"url":68,"source":69,"tags":83},[71],{"url":73,"source":69,"tags":85},[71],{"url":76,"source":69,"tags":87},[71],10,[90,98],{"id":91,"name":92,"description":93,"extendedDescription":94,"status":95,"abstraction":96,"structure":97},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":99,"name":100,"description":101,"extendedDescription":102,"status":95,"abstraction":103,"structure":97},"CWE-127","Buffer Under-read","The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.","This typically occurs when the pointer or its index is decremented to a position before the buffer, when pointer arithmetic results in a position before the beginning of the valid memory location, or when a negative index is used. This may result in exposure of sensitive information or possibly a crash.","Variant",2,false,[],{"title":108,"metaDescription":109,"keywords":110,"canonicalUrl":111,"structuredData":112},"What is CVE-2024-25629? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-25629, a medium severity cyber security vulnerability from 2024. c-ares is a C library for asynchronous DNS requests. `are...","CVE-2024-25629, CVE-2024-25629 vulnerability, CVE-2024-25629 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, c-ares security, fedoraproject security, c-ares vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2024-25629",{"@context":113,"@type":114,"headline":108,"description":109,"datePublished":10,"dateModified":11,"author":115,"publisher":119,"about":123,"mainEntityOfPage":127,"articleSection":130,"keywords":131},"https:\u002F\u002Fschema.org","TechArticle",{"@type":116,"name":117,"url":118},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":116,"name":117,"url":118,"logo":120},{"@type":121,"url":122},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":124,"name":6,"description":125,"additionalType":126},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":128,"@id":129},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-25629","Cybersecurity","CVE-2024-25629, CVE-2024-25629 vulnerability, CVE-2024-25629 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[133,141],{"Operator":29,"Negate":29,"Nodes":134},[135],{"Operator":136,"Negate":29,"CPEMatch":137},"OR",[138],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":139,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":140,"VersionEndIncluding":29},"33B2994F-77FD-46CD-B5DC-9DD93A338656","1.27.0",{"Operator":29,"Negate":29,"Nodes":142},[143],{"Operator":136,"Negate":29,"CPEMatch":144},[145,147,149],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":146,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":148,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":150,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"CA277A6C-83EC-4536-9125-97B84C4FAF59",[],[],{"lastModified":11,"cacheTime":154,"version":155},1793218099986,"2.0",{"score":157,"band":158,"action":159,"scoredAt":160},17,"Info","Track","2026-07-01T10:31:59.235294+00:00"]