{"id":"CVE-2021-3672","details":"A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.","aliases":["BIT-node-2021-3672","BIT-node-min-2021-3672","BIT-pgbouncer-2021-3672"],"modified":"2026-04-10T04:35:36.651660Z","published":"2021-11-23T19:15:07.877Z","related":["ALSA-2021:3623","ALSA-2021:3666","ALSA-2022:2043","MGASA-2021-0453","MGASA-2021-0463","SUSE-SU-2021:14776-1","SUSE-SU-2021:2690-1","SUSE-SU-2021:2760-1","SUSE-SU-2021:2823-1","SUSE-SU-2021:2824-1","SUSE-SU-2021:2875-1","SUSE-SU-2021:2953-1","SUSE-SU-2021:3184-1","SUSE-SU-2021:3211-1","openSUSE-SU-2021:1168-1","openSUSE-SU-2021:1214-1","openSUSE-SU-2021:1239-1","openSUSE-SU-2021:1313-1","openSUSE-SU-2021:2760-1","openSUSE-SU-2021:2875-1","openSUSE-SU-2021:2953-1","openSUSE-SU-2021:3211-1","openSUSE-SU-2024:10668-1","openSUSE-SU-2024:11096-1","openSUSE-SU-2024:11097-1"],"references":[{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202401-02"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujul2022.html"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988342"},{"type":"FIX","url":"https://c-ares.haxx.se/adv_20210810.html"},{"type":"FIX","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/c-ares/c-ares","events":[{"introduced":"0"},{"fixed":"6654436a307a5a686b008c1d4c93b0085da6e6d8"},{"introduced":"0"},{"last_affected":"799e81d4ace75af7d530857d4f8b35913a27463e"}],"database_specific":{"versions":[{"introduced":"1.0.0"},{"fixed":"1.17.2"},{"introduced":"0"},{"last_affected":"1.17.0"}]}},{"type":"GIT","repo":"https://github.com/nodejs/node","events":[{"introduced":"0"},{"last_affected":"362fe010fe8f6feb0030e1e02c689b501e11ddb7"},{"introduced":"0"},{"last_affected":"a7ffa8d3fde90e16e1e7f6130fc1665b7d541939"},{"introduced":"0"},{"last_affected":"0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba"},{"introduced":"0"},{"last_affected":"a7ffa8d3fde90e16e1e7f6130fc1665b7d541939"},{"introduced":"0"},{"last_affected":"f6fc46e03674ab1896792b7363ecac0665b5e0c5"},{"introduced":"0"},{"last_affected":"eb66efd6052801e2f10360c51787569da0185808"},{"introduced":"0"},{"last_affected":"56a0577b2ebf111346779cf790a1f54e0e464078"},{"introduced":"0"},{"last_affected":"0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba"},{"introduced":"0"},{"last_affected":"f6fc46e03674ab1896792b7363ecac0665b5e0c5"},{"introduced":"0"},{"last_affected":"eb66efd6052801e2f10360c51787569da0185808"},{"introduced":"0"},{"last_affected":"56a0577b2ebf111346779cf790a1f54e0e464078"},{"introduced":"0"},{"last_affected":"0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba"},{"introduced":"0"},{"last_affected":"f6fc46e03674ab1896792b7363ecac0665b5e0c5"},{"introduced":"0"},{"last_affected":"eb66efd6052801e2f10360c51787569da0185808"},{"introduced":"0"},{"last_affected":"56a0577b2ebf111346779cf790a1f54e0e464078"},{"introduced":"0"},{"last_affected":"eb66efd6052801e2f10360c51787569da0185808"},{"introduced":"0"},{"last_affected":"56a0577b2ebf111346779cf790a1f54e0e464078"},{"introduced":"0"},{"last_affected":"eb66efd6052801e2f10360c51787569da0185808"},{"introduced":"0"},{"last_affected":"56a0577b2ebf111346779cf790a1f54e0e464078"},{"introduced":"0"},{"last_affected":"f6fc46e03674ab1896792b7363ecac0665b5e0c5"},{"introduced":"0"},{"last_affected":"eb66efd6052801e2f10360c51787569da0185808"},{"introduced":"0"},{"last_affected":"56a0577b2ebf111346779cf790a1f54e0e464078"},{"introduced":"0"},{"last_affected":"56a0577b2ebf111346779cf790a1f54e0e464078"},{"introduced":"2f45ad8060e13d5ac912335096d21526f2f9602b"},{"last_affected":"921493e2287aa895679620155b5288b2e1587bfd"},{"introduced":"42cce5a9d0fd905bf4ad7a2528c36572dfb8b5ad"},{"fixed":"151261efb8b85696620f80ecc1f50d9c1f886a1b"},{"introduced":"73aa21658dfa6a22c06451d080152b32b1f98dbe"},{"last_affected":"354b6a93bd1d66f1833489d6fe01a2b0e8f6aff9"},{"introduced":"c1da528bc25c9cc5a8240a7b4f136f5968f6e113"},{"fixed":"db159ab870b1aa7f55e4e450c81764f22bf0ef80"},{"introduced":"7162e686b18d22b4385fa5c04274fb04dbd810c7"},{"fixed":"bfe80913e88139da1aa283475cdbc060ea98ae6f"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"7.0"},{"introduced":"0"},{"last_affected":"7.7"},{"introduced":"0"},{"last_affected":"8.0"},{"introduced":"0"},{"last_affected":"7.7"},{"introduced":"0"},{"last_affected":"8.1"},{"introduced":"0"},{"last_affected":"8.2"},{"introduced":"0"},{"last_affected":"8.4"},{"introduced":"0"},{"last_affected":"8.0"},{"introduced":"0"},{"last_affected":"8.1"},{"introduced":"0"},{"last_affected":"8.2"},{"introduced":"0"},{"last_affected":"8.4"},{"introduced":"0"},{"last_affected":"8.0"},{"introduced":"0"},{"last_affected":"8.1"},{"introduced":"0"},{"last_affected":"8.2"},{"introduced":"0"},{"last_affected":"8.4"},{"introduced":"0"},{"last_affected":"8.2"},{"introduced":"0"},{"last_affected":"8.4"},{"introduced":"0"},{"last_affected":"8.2"},{"introduced":"0"},{"last_affected":"8.4"},{"introduced":"0"},{"last_affected":"8.1"},{"introduced":"0"},{"last_affected":"8.2"},{"introduced":"0"},{"last_affected":"8.4"},{"introduced":"0"},{"last_affected":"8.4"},{"introduced":"12.0.0"},{"last_affected":"12.12.0"},{"introduced":"12.13.0"},{"fixed":"12.22.5"},{"introduced":"14.0.0"},{"last_affected":"14.14.0"},{"introduced":"14.15.0"},{"fixed":"14.17.5"},{"introduced":"16.0.0"},{"fixed":"16.6.2"}]}}],"versions":["c-ares-1_17_0","c-ares-1_2_0","cares-1_10_0","cares-1_11_0","cares-1_11_0-rc1","cares-1_12_0","cares-1_13_0","cares-1_14_0","cares-1_15_0","cares-1_16_0","cares-1_16_1","cares-1_17_1","cares-1_1_0","cares-1_2_1","cares-1_3_1","cares-1_3_2","cares-1_4_0","cares-1_5_0","cares-1_5_1","cares-1_5_2","cares-1_5_3","cares-1_6_0","cares-1_7_0","cares-1_7_1","cares-1_7_2","cares-1_7_3","cares-1_7_4","cares-1_7_5","cares-1_8_0","cares-1_9_0","cares-1_9_1","curl-7_10_8","curl-7_11_0","curl-7_11_1","curl-7_12_0","curl-7_12_1","curl-7_12_2","curl-7_13_0","curl-7_13_1","curl-7_13_2","curl-7_14_0","curl-7_14_1","curl-7_15_0","curl-7_15_1","curl-7_15_3","curl-7_15_4","curl-7_15_5","curl-7_15_6-prepipeline","curl-7_16_0","curl-7_16_1","curl-7_16_2","curl-7_16_3","curl-7_16_4","curl-7_17_0","curl-7_17_1","curl-7_18_0","curl-7_18_1","curl-7_18_2","curl-7_19_0","curl-7_19_2","curl-7_19_3","curl-7_19_4","curl-7_19_5","curl-7_19_6","curl-7_19_7","curl-7_20_0","v0.0.1","v0.0.2","v0.0.3","v0.0.4","v0.0.6","v0.1.0","v0.1.1","v0.1.10","v0.1.100","v0.1.101","v0.1.102","v0.1.103","v0.1.104","v0.1.11","v0.1.12","v0.1.13","v0.1.14","v0.1.15","v0.1.16","v0.1.17","v0.1.18","v0.1.19","v0.1.2","v0.1.20","v0.1.21","v0.1.22","v0.1.23","v0.1.24","v0.1.25","v0.1.26","v0.1.27","v0.1.28","v0.1.29","v0.1.3","v0.1.30","v0.1.31","v0.1.32","v0.1.33","v0.1.4","v0.1.5","v0.1.6","v0.1.7","v0.1.8","v0.1.9","v0.1.92","v0.1.93","v0.1.94","v0.1.95","v0.1.96","v0.1.97","v0.1.98","v0.1.99","v0.2.0","v0.3.0","v0.3.1","v0.3.2","v0.3.4","v0.3.5","v0.3.6","v0.3.7","v0.3.8","v0.4.0","v0.5.0","v0.5.1","v0.5.10","v0.5.2","v0.5.3","v0.5.4","v0.5.5","v0.5.5-rc1","v0.5.6","v0.5.7","v0.5.8","v0.5.9","v0.6.0","v0.6.1","v0.7.0","v0.7.2","v0.7.3","v1.0.1","v1.0.1-release","v1.0.2","v1.0.2-release","v1.0.3","v1.0.4","v1.1.0","v1.2.0","v1.3.0","v1.4.1","v1.4.2","v1.4.3","v1.5.0","v1.5.1","v1.6.0","v1.6.1","v1.6.2","v1.6.3","v1.6.4","v1.7.0","v1.7.1","v12.0.0","v12.1.0","v12.10.0","v12.11.0","v12.11.1","v12.12.0","v12.13.0","v12.13.1","v12.14.0","v12.14.1","v12.15.0","v12.16.0","v12.16.1","v12.16.2","v12.16.3","v12.17.0","v12.18.0","v12.18.1","v12.18.2","v12.18.3","v12.18.4","v12.19.0","v12.19.1","v12.2.0","v12.20.0","v12.20.1","v12.20.2","v12.21.0","v12.22.0","v12.22.1","v12.22.2","v12.22.3","v12.22.4","v12.3.0","v12.3.1","v12.4.0","v12.5.0","v12.6.0","v12.7.0","v12.8.0","v12.8.1","v12.9.0","v12.9.1","v14.0.0","v14.1.0","v14.10.0","v14.10.1","v14.11.0","v14.12.0","v14.13.0","v14.13.1","v14.14.0","v14.15.0","v14.15.1","v14.15.2","v14.15.3","v14.15.4","v14.15.5","v14.16.0","v14.16.1","v14.17.0","v14.17.1","v14.17.2","v14.17.3","v14.17.4","v14.2.0","v14.3.0","v14.4.0","v14.5.0","v14.6.0","v14.7.0","v14.8.0","v14.9.0","v16.0.0","v16.1.0","v16.2.0","v16.3.0","v16.4.0","v16.4.1","v16.4.2","v16.5.0","v16.6.0","v16.6.1","v2.0.0","v2.0.1","v2.0.2","v2.1.0","v2.2.0","v2.2.1","v2.3.0","v2.3.1","v2.3.2","v2.3.3","v2.3.4","v2.4.0","v2.5.0","v3.0.0","v7.0.0","v7.1.0","v7.2.0","v7.2.1","v7.3.0","v7.4.0","v7.5.0","v7.6.0","v7.7.0","v8.0.0","v8.1.0","v8.1.1","v8.1.2","v8.1.3","v8.1.4","v8.2.0","v8.2.1","v8.3.0","v8.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3672.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"33"}]},{"events":[{"introduced":"0"},{"last_affected":"34"}]},{"events":[{"introduced":"0"},{"last_affected":"1"}]},{"events":[{"introduced":"0"},{"last_affected":"1"}]},{"events":[{"introduced":"0"},{"fixed":"1.0.1.1"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}]}