CVE-2016-5180
CRITICAL 9.8EPSS 8.6%
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
- CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 8.58% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2016-10-03
- Updated
- 2024-08-06
Proof-of-concept exploits (3)
- pouriam23/CVE-2016-51800★ · 2025-05-23
- pouriam23/CVE-2016-5180-docker-0★ · 2025-05-23
- pouriam23/final-CVE-2016-51800★ · 2025-05-24