Skip to content
Multiple Vulnerabilities in c-ares Affecting Ubuntu Systems

Multiple Vulnerabilities in c-ares Affecting Ubuntu Systems

First seen 22 Oct 2026, 01:09 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 01:38 UTC
  • •c-ares vulnerabilities affect multiple Ubuntu LTS versions.
  • •Remote attackers can exploit these flaws for denial of service or code execution.
  • •Patches are available; users should update their systems immediately.

Recent security advisories revealed several vulnerabilities in the c-ares library, affecting Ubuntu 16.04 LTS, 18.04 LTS, 24.04 LTS, and 26.04 LTS. The vulnerabilities include improper parsing of SOA replies (CVE-2020-22217), mishandling of sortlist strings (CVE-2022-4904), and inadequate DNS compression handling (CVE-2026-69184). These flaws could allow remote attackers to crash c-ares, leading to denial of service, or potentially execute arbitrary code. Additionally, CVE-2026-69186 was identified, impacting Ubuntu 24.04 LTS and 26.04 LTS, which could also lead to resource exhaustion. The issues were disclosed on October 21, 2026, and patches are available for affected systems. Users are advised to update their systems promptly to mitigate these risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2023-03-06
CVE-2022-4904 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2023-08-22
CVE-2020-22217 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-18
CVE-2026-69184 and CVE-2026-69186 published
Two vulnerabilities in c-ares were published, with potential for denial of service and resource exhaustion.
Linuxsecurity
2026-10-21
Security advisories published
Multiple vulnerabilities in c-ares were disclosed, affecting various Ubuntu LTS versions.
Ubuntu

More articles in this cluster (3)

Following this threat?

Track Ubuntu and CVE-2020-22217 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 2

Common questions

Which Ubuntu versions are affected?
The vulnerabilities affect Ubuntu 16.04 LTS, 18.04 LTS, 24.04 LTS, and 26.04 LTS.
What types of attacks can these vulnerabilities enable?
They can allow remote attackers to crash c-ares, leading to denial of service, or potentially execute arbitrary code.
How can I protect my systems?
Users should apply the latest patches available for their respective Ubuntu versions to mitigate these vulnerabilities.