CVE-2026-69184

Vendor

Canonical

Product

Ubuntu

CVSS

7.5

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   Ubuntu notice Ubuntu 10d ago

   c-ares vulnerabilities

   It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and…

   CVE-2020-22217CVE-2022-4904CVE-2026-69184+1 more Canonical
2. 10
   CVE NVD 18 Sep 2026

   c-ares is an asynchronous resolver library.

   c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a…

   CVSS 7.5 CVE-2026-69184