CVE-2020-22217 Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in c-ares Library Announced Two vulnerabilities in the c-ares library were reported on February 18, 2026. CVE-2023-31130, a buffer underwrite issue, was published on May 25, 2023, while CVE-2020-22217, a buffer overflow vulnerability, was published on August 22, 2023. Affected versions include c-ares prior to 1.16.1 and through 1.17.0. 2 sources 39