A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-c-aresalma-upgrade-c-ares-develalma-upgrade-nodejsalma-upgrade-nodejs-develalma-upgrade-nodejs-docsalma-upgrade-nodejs-full-i18nalma-upgrade-nodejs-nodemonalma-upgrade-nodejs-packagingalma-upgrade-npm | May 4, 2022 | Nov 23, 2021 | |
| Alpine Linux | alpine-linux-upgrade-c-aresalpine-linux-upgrade-nodejsalpine-linux-upgrade-nodejs-current | Mar 26, 2024 | Nov 23, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-c-aresamazon-linux-ami-2-upgrade-c-ares-debuginfoamazon-linux-ami-2-upgrade-c-ares-devel | Jan 10, 2024 | Nov 23, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-c-ares | Nov 5, 2021 | Aug 10, 2021 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Nov 23, 2021 | |
| Centos_linux | — | centos-upgrade-c-arescentos-upgrade-c-ares-debuginfocentos-upgrade-c-ares-debugsourcecentos-upgrade-c-ares-develcentos-upgrade-nodejscentos-upgrade-nodejs-debuginfocentos-upgrade-nodejs-debugsourcecentos-upgrade-nodejs-develcentos-upgrade-nodejs-docscentos-upgrade-nodejs-full-i18ncentos-upgrade-nodejs-nodemoncentos-upgrade-nodejs-packagingcentos-upgrade-npm | Sep 22, 2021 | Sep 21, 2021 |
| Debian | debian-upgrade-c-ares | Aug 12, 2021 | Aug 12, 2021 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Oct 15, 2021 | |
| Freebsd | freebsd-upgrade-package-py39-pycares | Apr 14, 2023 | Apr 9, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-net-dns-c-aresgentoo-linux-upgrade-net-libs-nodejs | Jan 8, 2024 | Nov 23, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-c-areshuawei-euleros-2_0_sp3-upgrade-c-ares-devel | Oct 26, 2021 | Oct 25, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-c-areshuawei-euleros-2_0_sp5-upgrade-c-ares-devel | Nov 12, 2021 | Oct 25, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-c-areshuawei-euleros-2_0_sp8-upgrade-c-ares-devel | Nov 2, 2021 | Oct 25, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-c-ares | Nov 12, 2021 | Oct 25, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-libcares-1-17-2-11-4-37-0-1-101-1 | Oct 12, 2021 | Oct 12, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-c-aresoracle-linux-upgrade-c-ares-develoracle-linux-upgrade-nodejsoracle-linux-upgrade-nodejs-develoracle-linux-upgrade-nodejs-docsoracle-linux-upgrade-nodejs-full-i18noracle-linux-upgrade-nodejs-nodemonoracle-linux-upgrade-nodejs-packagingoracle-linux-upgrade-npm | Sep 23, 2021 | Aug 10, 2021 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-c-aresredhat-upgrade-c-ares-debuginforedhat-upgrade-c-ares-debugsourceredhat-upgrade-c-ares-develredhat-upgrade-nodejsredhat-upgrade-nodejs-debuginforedhat-upgrade-nodejs-debugsourceredhat-upgrade-nodejs-develredhat-upgrade-nodejs-docsredhat-upgrade-nodejs-full-i18nredhat-upgrade-nodejs-nodemonredhat-upgrade-nodejs-packagingredhat-upgrade-npm | Sep 22, 2021 | Sep 21, 2021 | |
| Rocky_linux | rocky-upgrade-c-aresrocky-upgrade-c-ares-debuginforocky-upgrade-c-ares-debugsourcerocky-upgrade-c-ares-develrocky-upgrade-nodejsrocky-upgrade-nodejs-debuginforocky-upgrade-nodejs-debugsourcerocky-upgrade-nodejs-develrocky-upgrade-nodejs-full-i18nrocky-upgrade-npm | May 11, 2022 | Nov 23, 2021 | |
| Suse | — | suse-upgrade-c-ares-develsuse-upgrade-c-ares-utilssuse-upgrade-libcares-develsuse-upgrade-libcares2suse-upgrade-libcares2-32bitsuse-upgrade-nodejs10suse-upgrade-nodejs10-develsuse-upgrade-nodejs10-docssuse-upgrade-nodejs12suse-upgrade-nodejs12-develsuse-upgrade-nodejs12-docssuse-upgrade-nodejs14suse-upgrade-nodejs14-develsuse-upgrade-nodejs14-docssuse-upgrade-npm10suse-upgrade-npm12suse-upgrade-npm14 | Aug 11, 2021 | Aug 10, 2021 |
| Ubuntu | ubuntu-pro-upgrade-libc-ares2ubuntu-upgrade-libc-ares2 | Aug 11, 2021 | Aug 10, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub