Threats affecting pkg:rpm/redhat/c-ares

A low severity security vulnerability (CVE-2024-25629) exists in the c-ares C library used for asynchronous DNS requests and name resolving. The vulnerability is an out-of-bounds read in the ares__read_line() function. Red Hat has issued a security advisory (RHSA-2024:3842) providing updates for Red Hat Enterprise Linux 9 and its variants to address this issue. The update fixes the out-of-bounds read to prevent potential memory safety issues. No known exploits are reported in the wild. The vulnerability affects multiple architectures and variants of Red Hat Enterprise Linux 9. A patch is available and should be applied to affected systems.