ALPINE-CVE-2021-3672
ALPINE-CVE-2021-3672
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.
CVSS 5.6 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
c-ares Alpine:v3.11
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.12
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.13
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.14
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.15
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.16
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.17
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.18
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.19
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.20
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.21
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.22
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.23
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
c-ares Alpine:v3.24
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.17.2-r0
Update to 1.17.2-r0
nodejs Alpine:v3.11
- Affected ranges
- ECOSYSTEM: < 12.22.5-r0
Update to 12.22.5-r0
nodejs Alpine:v3.12
- Affected ranges
- ECOSYSTEM: < 12.22.5-r0
Update to 12.22.5-r0
nodejs Alpine:v3.13
- Affected ranges
- ECOSYSTEM: < 14.17.5-r0
Update to 14.17.5-r0
nodejs Alpine:v3.14
- Affected ranges
- ECOSYSTEM: < 14.17.5-r0
Update to 14.17.5-r0
nodejs Alpine:v3.15
- Affected ranges
- ECOSYSTEM: < 14.17.5-r0
Update to 14.17.5-r0
nodejs Alpine:v3.16
- Affected ranges
- ECOSYSTEM: < 14.17.5-r0
Update to 14.17.5-r0
nodejs Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 14.17.5-r0
Update to 14.17.5-r0
nodejs Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 14.17.5-r0
Update to 14.17.5-r0
nodejs Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 14.17.5-r0
Update to 14.17.5-r0
nodejs Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 14.17.5-r0
Update to 14.17.5-r0