CVE-2026-69186

Vendor

Canonical

Product

Ubuntu

CVSS

5.3

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   Ubuntu notice Ubuntu 10d ago

   c-ares vulnerabilities

   It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and…

   CVE-2020-22217CVE-2022-4904CVE-2026-69184+1 more Canonical
2. 3
   CVE NVD 18 Sep 2026

   c-ares is an asynchronous resolver library.

   c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_parse() trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed…

   CVSS 5.3 CVE-2026-69186