Read the docs
Red Hat Security Advisory

RHSA-2022:2043

c-ares security update

Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

TI-2021-02612 CVE-2021-3672 · GHSA-hghm-3vc3-hppj

Cross-site scripting in c-ares

Priority LOW 30

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.02814 Published 2021-11-23 Partial fix CWE-79