CVE-2016-5180 in Google Android

Summary

Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.

Reservation

05/31/2016

Disclosure

10/03/2016

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
94930	Google Android c-ares out-of-bounds write	787	Not defined	Official fix	CVE-2016-5180
92315	c-ares ares_create_query out-of-bounds write	787	Not defined	Official fix	CVE-2016-5180