[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f70Yq-m4EcRMtXTNz_U-2yYzP2dvtEUlmoPkZNS1N6xM":3,"g5a-risk:CVE-2024-25629":159},{"success":4,"data":5,"meta":156},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":29,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":59,"references":60,"referencesCount":91,"weaknesses":92,"weaknessesCount":107,"isActivelyExploited":108,"cisaInfo":29,"otxData":29,"relatedBlogPosts":109,"seoMetadata":110,"configurations":135,"relatedVendorCves":154,"notableEvents":155},"CVE-2024-25629","What is CVE-2024-25629?","c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `\u002Fetc\u002Fresolv.conf`, `\u002Fetc\u002Fnsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `\u002Fetc\u002Fhosts` file. If any of these configuration files has an embedded `NULL` character as the first character in a new line, it can lead to attempting to read memory prior to the start of the given buffer which may result in a crash. This issue is fixed in c-ares 1.27.0. No known workarounds exist.","c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `\u002Fetc\u002Fresolv.conf`, `\u002Fetc\u002Fnsswitc...","2024-02-23T15:15:09.237","2026-06-17T07:16:19.49",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":39},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","LOCAL","LOW","HIGH","NONE","UNCHANGED",4.4,"MEDIUM",null,0.8,3.6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":36,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},1.8,[],[],[],0.00352,[40,40,40,40,40,40,40],"Medium",[44,48,53,56],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"c-ares","*","cpe:2.3:a:c-ares:c-ares:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"fedoraproject","fedora","38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"39","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"40","cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*",4,[61,66,70,75,78,81,83,85,87,89],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fgithub.com\u002Fc-ares\u002Fc-ares\u002Fcommit\u002Fa804c04ddc8245fc8adf0e92368709639125e183","GitHub",[65],"Patch",{"url":67,"source":63,"tags":68},"https:\u002F\u002Fgithub.com\u002Fc-ares\u002Fc-ares\u002Fsecurity\u002Fadvisories\u002FGHSA-mg26-v6qh-x48q",[69],"Vendor Advisory",{"url":71,"source":72,"tags":73},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F2P76QYINQNPEHUTEEDOUYIRZ2X6UVZ5K\u002F","Fedoraproject",[74],"Mailing List",{"url":76,"source":72,"tags":77},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FCSCMTSPDIE2UHU34TIXQQHZ6JTE3Y3VF\u002F",[74],{"url":79,"source":72,"tags":80},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGX37LFPFQ3T6FFMMFYQTEGIQXXN7F27U\u002F",[74],{"url":62,"source":63,"tags":82},[65],{"url":67,"source":63,"tags":84},[69],{"url":71,"source":72,"tags":86},[74],{"url":76,"source":72,"tags":88},[74],{"url":79,"source":72,"tags":90},[74],10,[93,101],{"id":94,"name":95,"description":96,"extendedDescription":97,"status":98,"abstraction":99,"structure":100},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":102,"name":103,"description":104,"extendedDescription":105,"status":98,"abstraction":106,"structure":100},"CWE-127","Buffer Under-read","The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.","This typically occurs when the pointer or its index is decremented to a position before the buffer, when pointer arithmetic results in a position before the beginning of the valid memory location, or when a negative index is used. This may result in exposure of sensitive information or possibly a crash.","Variant",2,false,[],{"title":111,"metaDescription":112,"keywords":113,"canonicalUrl":114,"structuredData":115},"What is CVE-2024-25629? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-25629, a medium severity cyber security vulnerability from 2024. c-ares is a C library for asynchronous DNS requests. `are...","CVE-2024-25629, CVE-2024-25629 vulnerability, CVE-2024-25629 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, c-ares security, fedoraproject security, c-ares vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2024-25629",{"@context":116,"@type":117,"headline":111,"description":112,"datePublished":10,"dateModified":11,"author":118,"publisher":122,"about":126,"mainEntityOfPage":130,"articleSection":133,"keywords":134},"https:\u002F\u002Fschema.org","TechArticle",{"@type":119,"name":120,"url":121},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":119,"name":120,"url":121,"logo":123},{"@type":124,"url":125},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":127,"name":6,"description":128,"additionalType":129},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":131,"@id":132},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-25629","Cybersecurity","CVE-2024-25629, CVE-2024-25629 vulnerability, CVE-2024-25629 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[136,144],{"Operator":29,"Negate":29,"Nodes":137},[138],{"Operator":139,"Negate":108,"CPEMatch":140},"OR",[141],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":142,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":143,"VersionEndIncluding":29},"33B2994F-77FD-46CD-B5DC-9DD93A338656","1.27.0",{"Operator":29,"Negate":29,"Nodes":145},[146],{"Operator":139,"Negate":108,"CPEMatch":147},[148,150,152],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":149,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":151,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":153,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"CA277A6C-83EC-4536-9125-97B84C4FAF59",[],[],{"lastModified":11,"cacheTime":157,"version":158},1792268910109,"2.0",{"score":160,"band":161,"action":162,"scoredAt":163},17,"Info","Track","2026-10-16T07:00:53.751867+00:00"]