Medium severity5.6NVD Advisory· Published Nov 23, 2021· Updated Jun 17, 2026

CVE-2021-3672

Description

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

c-ares library/c-ares librarydescription
osv-coords64 versions
pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/opensuse/nodejs12&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/nodejs10&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/c-ares&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/nodejs10&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/libcares2&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/opensuse/c-ares&distro=openSUSE%20Tumbleweed pkg:rpm/suse/libcares2&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/c-ares&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/c-ares&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/c-ares&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/c-ares&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/c-ares&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/c-ares&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.0 pkg:rpm/suse/nodejs12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/nodejs12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP2 pkg:rpm/opensuse/nodejs16&distro=openSUSE%20Tumbleweed pkg:rpm/almalinux/nodejs pkg:rpm/almalinux/nodejs-devel pkg:rpm/almalinux/nodejs-docs pkg:rpm/almalinux/nodejs-full-i18n pkg:rpm/almalinux/nodejs-nodemon pkg:rpm/almalinux/nodejs-packaging pkg:rpm/almalinux/npm pkg:bitnami/pgbouncer pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/almalinux/c-ares pkg:rpm/almalinux/c-ares-devel pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:bitnami/node-min pkg:bitnami/node pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/nodejs14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/nodejs14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP2 pkg:rpm/suse/nodejs14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP3 pkg:rpm/opensuse/nodejs14&distro=openSUSE%20Tumbleweed pkg:rpm/suse/c-ares&distro=SUSE%20Manager%20Server%204.0 pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS pkg:rpm/suse/libcares2&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/libcares2&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/c-ares&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/c-ares&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP2 pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/nodejs12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP3 pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/libcares2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/opensuse/nodejs14&distro=openSUSE%20Leap%2015.2 pkg:rpm/suse/c-ares&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/c-ares&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/c-ares&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/c-ares&distro=SUSE%20Manager%20Proxy%204.0 pkg:rpm/suse/c-ares&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/libcares2&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/opensuse/c-ares-tests&distro=openSUSE%20Leap%2015.2 pkg:rpm/suse/c-ares&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/opensuse/c-ares&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/nodejs12&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/nodejs14&distro=openSUSE%20Leap%2015.3
< 1.9.1-9.7.1+ 63 more
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 12.22.5-lp152.3.18.1
- (no CPE)range: < 10.24.1-lp152.2.18.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 10.24.1-1.39.2
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 1.17.2-2.2
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 12.22.5-1.35.1
- (no CPE)range: < 12.22.5-4.19.1
- (no CPE)range: < 16.6.2-2.2
- (no CPE)range: < 1:12.22.5-1.module_el8.4.0+2529+af52a4c7
- (no CPE)range: < 1:12.22.5-1.module_el8.5.0+85+79a7b441
- (no CPE)range: < 1:12.22.5-1.module_el8.4.0+2529+af52a4c7
- (no CPE)range: < 1:12.22.5-1.module_el8.5.0+85+79a7b441
- (no CPE)range: < 2.0.3-1.module_el8.4.0+2521+c668cc9f
- (no CPE)range: < 17-3.module_el8.4.0+2224+b07ac28e
- (no CPE)range: < 1:6.14.14-1.12.22.5.1.module_el8.4.0+2529+af52a4c7
- (no CPE)range: < 1.17.1
- (no CPE)range: < 1.7.4-7.10.3.1
- (no CPE)range: < 1.13.0-6.el8
- (no CPE)range: < 1.13.0-6.el8
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: >= 12.0.0, < 12.12.1
- (no CPE)range: >= 12.0.0, < 12.12.1
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 14.17.5-6.15.3
- (no CPE)range: < 14.17.5-5.15.5
- (no CPE)range: < 14.17.5-5.15.5
- (no CPE)range: < 14.17.5-1.2
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.7.4-7.10.3.1
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 10.24.1-1.39.2
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 12.22.5-4.19.1
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 14.17.5-lp152.14.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 10.24.1-1.42.2
- (no CPE)range: < 1.9.1-9.7.1
- (no CPE)range: < 1.17.1+20200724-lp152.2.9.1
- (no CPE)range: < 1.17.1+20200724-3.14.1
- (no CPE)range: < 1.17.1+20200724-lp152.2.9.1
- (no CPE)range: < 12.22.5-4.19.1
- (no CPE)range: < 14.17.5-5.15.5
C Ares/C Aresllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:c-ares_project:c-ares:*:*:*:*:*:*:*:*range: >=1.0.0,<1.17.2
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server4 versions
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.7:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_tus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Computer Node
cpe:2.3:o:redhat:enterprise_linux_computer_node:1:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Eus4 versions
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems Eus3 versions
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian Eus3 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Aus2 versions
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Tus2 versions
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Update Services For Sap Solutions3 versions
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Workstation
cpe:2.3:o:redhat:enterprise_linux_workstation:1:*:*:*:*:*:*:*
Siemens Foundation/Sinec Infrastructure Network Services
cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*
Range: <1.0.1.1
Node.js/Node.js2 versions
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*+ 1 more
- cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*range: >=12.0.0,<=12.12.0
- cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*range: >=12.13.0,<12.22.5
Pgbouncer/Pgbouncer
cpe:2.3:a:pgbouncer:pgbouncer:*:*:*:*:*:*:*:*
Range: <=1.17.0

Patches

Vulnerability mechanics

References

cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfnvdPatchThird Party Advisory
c-ares.haxx.se/adv_20210810.htmlnvdExploitPatchVendor Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
www.oracle.com/security-alerts/cpujul2022.htmlnvdThird Party Advisory
security.gentoo.org/glsa/202401-02nvd

News mentions

No linked articles in our index yet.

cvss	0.364
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000