The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade c-aresUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-develUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejsUpgrade c-ares-develUpgrade nodejs-packaging | May 4, 2022 | Nov 23, 2021 |
| Alpine Linux | — | Upgrade nodejsUpgrade c-aresUpgrade nodejs-current | Mar 26, 2024 | Nov 23, 2021 |
| Amazon Linux Ami 2 | — | Upgrade c-ares-develUpgrade c-ares-debuginfoUpgrade c-ares | Jan 10, 2024 | Nov 23, 2021 |
| Amazon_linux | — | Upgrade c-ares | Nov 5, 2021 | Aug 10, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 23, 2021 |
| Centos_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-docsUpgrade npmUpgrade nodejs-full-i18nUpgrade c-aresUpgrade c-ares-debugsourceUpgrade c-ares-develUpgrade nodejsUpgrade c-ares-debuginfo | Sep 22, 2021 | Sep 21, 2021 |
| Debian | — | Upgrade c-ares | Aug 12, 2021 | Aug 12, 2021 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 15, 2021 |
| Freebsd | — | Upgrade py39-pycares | Apr 14, 2023 | Apr 9, 2023 |
| Gentoo Linux | — | Upgrade net-libs/nodejs.Upgrade net-dns/c-ares. | Jan 8, 2024 | Nov 23, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade c-ares-develUpgrade c-ares | Oct 26, 2021 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade c-ares-develUpgrade c-ares | Nov 12, 2021 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade c-ares-develUpgrade c-ares | Nov 2, 2021 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade c-ares | Nov 12, 2021 | Oct 25, 2021 |
| Oracle Solaris | — | Upgrade library/libcares to version 1.17.2-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Oct 12, 2021 |
| Oracle_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-nodemonUpgrade c-ares-develUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-docsUpgrade c-ares | Sep 23, 2021 | Aug 10, 2021 |
| Redhat_linux | — | Upgrade nodejs-debugsourceUpgrade c-aresUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-develNo solution existsUpgrade nodejs-full-i18nUpgrade c-ares-debuginfoUpgrade npmUpgrade nodejs-docsUpgrade c-ares-develUpgrade nodejs-nodemonUpgrade c-ares-debugsourceUpgrade nodejs-packaging | Sep 22, 2021 | Sep 21, 2021 |
| Rocky_linux | — | Upgrade c-aresUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade c-ares-develUpgrade c-ares-debugsourceUpgrade npmUpgrade c-ares-debuginfoUpgrade nodejs-full-i18n | May 11, 2022 | Nov 23, 2021 |
| Suse | — | Upgrade c-ares-utilsUpgrade nodejs14-docsUpgrade nodejs14Upgrade libcares2Upgrade npm10Upgrade c-ares-develUpgrade libcares2-32bitUpgrade npm12Upgrade libcares-develUpgrade nodejs10-develUpgrade nodejs12-docsUpgrade npm14Upgrade nodejs10Upgrade nodejs12-develUpgrade nodejs14-develUpgrade nodejs10-docsUpgrade nodejs12 | Aug 11, 2021 | Aug 10, 2021 |
| Ubuntu | — | Upgrade libc-ares2Upgrade libc-ares2 (Ubuntu Pro) | Aug 11, 2021 | Aug 10, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 23, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub