CVE ID:	CVE-2022-4904
Description:	A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2023.0069   1.3.6.1.4.1.25623.1.1.2.2023.1861   1.3.6.1.4.1.25623.1.1.2.2023.1836   1.3.6.1.4.1.25623.1.1.2.2023.2065   1.3.6.1.4.1.25623.1.0.883898   1.3.6.1.4.1.25623.1.1.2.2023.2474   1.3.6.1.4.1.25623.1.1.2.2023.2117   1.3.6.1.4.1.25623.1.0.827166   1.3.6.1.4.1.25623.1.1.2.2023.1992   1.3.6.1.4.1.25623.1.1.2.2023.2449   1.3.6.1.4.1.25623.1.1.4.2023.0486.1   1.3.6.1.4.1.25623.1.0.893323   1.3.6.1.4.1.25623.1.1.2.2023.2013   1.3.6.1.4.1.25623.1.1.4.2023.3420.1   1.3.6.1.4.1.25623.1.1.2.2023.1970   1.3.6.1.4.1.25623.1.1.2.2023.1948   1.3.6.1.4.1.25623.1.1.2.2023.2260   1.3.6.1.4.1.25623.1.1.2.2023.2284   1.3.6.1.4.1.25623.1.1.12.2023.5907.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-4904 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/ https://security.gentoo.org/glsa/202401-02 https://bugzilla.redhat.com/show_bug.cgi?id=2168631 https://bugzilla.redhat.com/show_bug.cgi?id=2168631 https://github.com/c-ares/c-ares/issues/496 https://github.com/c-ares/c-ares/issues/496