Skip to content
Sign in
Not rated

CVE-2021-3672 A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name…

Description

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.

Affected products and versions

Product Affected versions Fixed in
c-ares Versions not published

Other CVEs of c-ares

The 3 CVEs of c-ares →
CVE-2022-4904 A flaw was found in the c-ares package 8.6 High CVE-2020-14354 A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to… Not rated
Track this CVE