c-ares-1.10.0-3.el7.1

The c-ares C library defines asynchronous DNS (Domain Name System) requests and
provides name resolving API.

Security Fix(es):

* c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2023-32067
c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of
service. If a target resolver sends a query, the attacker forges a malformed UDP
packet with a length of 0 and returns them to the target resolver. The target
resolver erroneously interprets the 0 length as a graceful shutdown of the
connection. This issue has been patched in version 1.19.1.