[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fb27Psc3KUDaX9-Ey74EckJIKKIk7r3b-E7vZ5rhDLh4":3,"g5a-risk:CVE-2023-31130":185},{"success":4,"data":5,"meta":182},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":28,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":61,"references":62,"referencesCount":111,"weaknesses":112,"weaknessesCount":127,"isActivelyExploited":128,"cisaInfo":28,"otxData":28,"relatedBlogPosts":129,"seoMetadata":130,"configurations":155,"relatedVendorCves":180,"notableEvents":181},"CVE-2023-31130","What is CVE-2023-31130?","c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular \"0::00:00:00\u002F2\" was found to cause an issue.  C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1.","c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular \"0::00:00:00\u002F2...","2023-05-25T22:15:09.76","2025-02-13T17:16:26.707",6.4,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":23,"BaseScore":26,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","LOCAL","HIGH","NONE","UNCHANGED",4.1,"MEDIUM",null,0.5,3.6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":35},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},5.9,0.00383,[36,36,36,36,36,36,36],"Medium",[40,45,50,53,58],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"c-ares_project","c-ares","*","cpe:2.3:a:c-ares_project:c-ares:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"fedoraproject","fedora","37","cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":51,"criteria":52,"vulnerable":4},"38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":59,"criteria":60,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",5,[63,68,72,77,81,84,88,92,95,97,99,101,103,105,107,109],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fgithub.com\u002Fc-ares\u002Fc-ares\u002Freleases\u002Ftag\u002Fcares-1_19_1","GitHub",[67],"Release Notes",{"url":69,"source":65,"tags":70},"https:\u002F\u002Fgithub.com\u002Fc-ares\u002Fc-ares\u002Fsecurity\u002Fadvisories\u002FGHSA-x6mf-cxr9-8q6v",[71],"Third Party Advisory",{"url":73,"source":74,"tags":75},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F06\u002Fmsg00034.html","Debian",[76],"Mailing List",{"url":78,"source":79,"tags":80},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FB5Z5XFNXTNPTCBBVXFDNZQVLLIE6VRBY\u002F","Fedoraproject",[76,71],{"url":82,"source":79,"tags":83},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FUBFWILTA33LOSV23P44FGTQQIDRJHIY7\u002F",[76,71],{"url":85,"source":86,"tags":87},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202310-09","Gentoo",[71],{"url":89,"source":90,"tags":91},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240605-0005\u002F","Netapp",[],{"url":93,"source":74,"tags":94},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2023\u002Fdsa-5419",[71],{"url":64,"source":65,"tags":96},[67],{"url":69,"source":65,"tags":98},[71],{"url":73,"source":74,"tags":100},[76],{"url":78,"source":79,"tags":102},[76,71],{"url":82,"source":79,"tags":104},[76,71],{"url":85,"source":86,"tags":106},[71],{"url":89,"source":90,"tags":108},[],{"url":93,"source":74,"tags":110},[71],16,[113,121],{"id":114,"name":115,"description":116,"extendedDescription":117,"status":118,"abstraction":119,"structure":120},"CWE-124","Buffer Underwrite ('Buffer Underflow')","The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.","This typically occurs when a pointer or its index is decremented to a position before the buffer, when pointer arithmetic results in a position before the beginning of the valid memory location, or when a negative index is used.","Incomplete","Base","Simple",{"id":122,"name":123,"description":124,"extendedDescription":125,"status":126,"abstraction":119,"structure":120},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft",2,false,[],{"title":131,"metaDescription":132,"keywords":133,"canonicalUrl":134,"structuredData":135},"What is CVE-2023-31130? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-31130, a medium severity cyber security vulnerability from 2023. c-ares is an asynchronous resolver library. ares_inet_net...","CVE-2023-31130, CVE-2023-31130 vulnerability, CVE-2023-31130 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, c-ares_project security, fedoraproject security, debian security, c-ares vulnerability, fedora vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2023-31130",{"@context":136,"@type":137,"headline":131,"description":132,"datePublished":10,"dateModified":11,"author":138,"publisher":142,"about":146,"mainEntityOfPage":150,"articleSection":153,"keywords":154},"https:\u002F\u002Fschema.org","TechArticle",{"@type":139,"name":140,"url":141},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":139,"name":140,"url":141,"logo":143},{"@type":144,"url":145},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":147,"name":6,"description":148,"additionalType":149},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":151,"@id":152},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-31130","Cybersecurity","CVE-2023-31130, CVE-2023-31130 vulnerability, CVE-2023-31130 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[156,164,172],{"Operator":28,"Negate":28,"Nodes":157},[158],{"Operator":159,"Negate":28,"CPEMatch":160},"OR",[161],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":162,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":163,"VersionEndIncluding":28},"48937B75-3746-49D9-B738-B19EF0EF8D9F","1.19.1",{"Operator":28,"Negate":28,"Nodes":165},[166],{"Operator":159,"Negate":28,"CPEMatch":167},[168,170],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":169,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E30D0E6F-4AE8-4284-8716-991DFA48CC5D",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":171,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",{"Operator":28,"Negate":28,"Nodes":173},[174],{"Operator":159,"Negate":28,"CPEMatch":175},[176,178],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":177,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":179,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"FA6FEEC2-9F11-4643-8827-749718254FED",[],[],{"lastModified":11,"cacheTime":183,"version":184},1792268362577,"2.0",{"score":186,"band":187,"action":188,"scoredAt":189},19,"Info","Track","2026-10-16T06:58:08.366882+00:00"]