CVE-2023-31130 Buffer Underwrite in ares_inet_net_pton()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in c-ares Library Announced Two vulnerabilities in the c-ares library were reported on February 18, 2026. CVE-2023-31130, a buffer underwrite issue, was published on May 25, 2023, while CVE-2020-22217, a buffer overflow vulnerability, was published on August 22, 2023. Affected versions include c-ares prior to 1.16.1 and through 1.17.0. 2 sources 39