[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftkY0lqbYR7YyVj_po71bzGoyy3EkRIm_--AvEFWz3s4":3,"g5a-risk:CVE-2020-14354":148},{"success":4,"data":5,"meta":146},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":25,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":50,"references":51,"referencesCount":79,"weaknesses":80,"weaknessesCount":102,"isActivelyExploited":103,"cisaInfo":25,"otxData":25,"relatedBlogPosts":104,"seoMetadata":105,"configurations":130,"relatedVendorCves":144,"notableEvents":145},"CVE-2020-14354","What is CVE-2020-14354?","A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability.","A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing. This flaw possibly...","2021-05-13T14:15:17.503","2023-11-07T03:17:10.4",3.3,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","NONE","UNCHANGED",null,1.8,1.4,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":22,"ExploitabilityScore":35,"ImpactScore":36,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":33,"BaseScore":34,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",2.1,3.9,2.9,0.00529,[37,37,37,37,37,37,37],"Low",[41,45],{"vendor":42,"product":42,"version":43,"criteria":44,"vulnerable":4},"c-ares","1.16.0","cpe:2.3:a:c-ares:c-ares:1.16.0:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"fedoraproject","fedora","33","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",2,[52,60,66,70,74],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1866838","Red Hat",[56,57,58,59],"Exploit","Issue Tracking","Patch","Third Party Advisory",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fc-ares.haxx.se\u002Fchangelog.html","Haxx",[64,65],"Release Notes","Vendor Advisory",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fgithub.com\u002Fc-ares\u002Fc-ares\u002Fcommit\u002F1cc7e83c3bdfaafbc5919c95025592d8de3a170e","GitHub",[58,59],{"url":71,"source":72,"tags":73},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6\u002F","Fedoraproject",[],{"url":75,"source":76,"tags":77},"https:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F158755\u002FGS20200804145053.txt","Packetstormsecurity",[56,59,78],"VDB Entry",5,[81,89,96],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","","Stable","Variant","Simple",{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":88},"CWE-120","Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.","A buffer overflow condition exists when a product attempts to put more data in a buffer than it can hold, or when it attempts to put data in a memory area outside of the boundaries of a buffer. The simplest type of error, and the most common cause of buffer overflows, is the \"classic\" case in which the product copies the buffer without restricting how much is copied. Other variants exist, but the existence of a classic overflow strongly suggests that the programmer is not considering even the most basic of security protections.","Incomplete","Base",{"id":97,"name":98,"description":99,"extendedDescription":100,"status":101,"abstraction":87,"structure":88},"CWE-415","Double Free","The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.","When a program calls free() twice with the same argument, the program's memory management data structures become corrupted. This corruption can cause the program to crash or, in some circumstances, cause two later calls to malloc() to return the same pointer. If malloc() returns the same value twice and the program later gives the attacker control over the data that is written into this doubly-allocated memory, the program becomes vulnerable to a buffer overflow attack.","Draft",3,false,[],{"title":106,"metaDescription":107,"keywords":108,"canonicalUrl":109,"structuredData":110},"What is CVE-2020-14354? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-14354, a low severity cyber security vulnerability from 2021. A possible use-after-free and double-free in c-ares lib vers...","CVE-2020-14354, CVE-2020-14354 vulnerability, CVE-2020-14354 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, c-ares security, fedoraproject security, c-ares vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2020-14354",{"@context":111,"@type":112,"headline":106,"description":107,"datePublished":10,"dateModified":11,"author":113,"publisher":117,"about":121,"mainEntityOfPage":125,"articleSection":128,"keywords":129},"https:\u002F\u002Fschema.org","TechArticle",{"@type":114,"name":115,"url":116},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":114,"name":115,"url":116,"logo":118},{"@type":119,"url":120},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":122,"name":6,"description":123,"additionalType":124},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":126,"@id":127},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-14354","Cybersecurity","CVE-2020-14354, CVE-2020-14354 vulnerability, CVE-2020-14354 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[131,138],{"Operator":25,"Negate":25,"Nodes":132},[133],{"Operator":134,"Negate":25,"CPEMatch":135},"OR",[136],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":137,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"59640538-D3DC-457C-B042-5D2B8F445A46",{"Operator":25,"Negate":25,"Nodes":139},[140],{"Operator":134,"Negate":25,"CPEMatch":141},[142],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":143,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"E460AA51-FCDA-46B9-AE97-E6676AA5E194",[],[],{"lastModified":11,"cacheTime":147,"version":31},1792268910049,{"score":149,"band":39,"action":150,"scoredAt":151},36,"Monitor","2026-10-16T06:51:06.525822+00:00"]