openSUSE: Security Advisory for c-ares (openSUSE-SU-2021:2760-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for c-ares (FEDORA-2021-0a60cbb948)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE 15 Security Update : c-ares (openSUSE-SU-2021:2760-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2760-1 advisory. - To fix this vulnerability, update the affected packages: c-ares CVE-2021-3672 Note that Nessus has not tested for this issue but has instead relie...

SUSE SLED15 / SLES15 Security Update : c-ares (SUSE-SU-2021:2760-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2760-1 advisory. Version update to git snapshot 1.17.1+20200724: - CVE-2021-3672: fixed missing input validation on hostnames returned by DNS server...

SUSE-SU-2021:2760-1 Security update for c-ares

This update for c-ares fixes the following issues: Version update to git snapshot 1.17.1+20200724: - CVE-2021-3672: fixed missing input validation on hostnames returned by DNS servers bsc1188881 - If aresgetaddrinfo was terminated by an aresdestroy, it would cause crash - Crash in sortaddrinfo if...

OPENSUSE-SU-2021:2760-1 Security update for c-ares

This update for c-ares fixes the following issues: Version update to git snapshot 1.17.1+20200724: - CVE-2021-3672: fixed missing input validation on hostnames returned by DNS servers bsc1188881 - If aresgetaddrinfo was terminated by an aresdestroy, it would cause crash - Crash in sortaddrinfo if...

Security update for c-ares (important)

openSUSE Security Update: Security update for c-ares Announcement ID: openSUSE-SU-2021:2760-1 Rating: important References: 1188881 Cross-References: CVE-2021-3672 CVSS scores: CVE-2021-3672 SUSE: 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: openSUSE Leap 15.3 An update tha...

Debian: Security Advisory (DLA-2738-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0378

An update of 'c-ares' packages of Photon OS has been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0423

An update of 'c-ares' packages of Photon OS has been released...

Moderate Photon OS Security Update - PHSA-2021-4.0-0079

Updates of 'c-ares' packages of Photon OS have been released...

Debian: Security Advisory (DSA-4954-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2021-0423

Updates of 'c-ares' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0282

Updates of 'c-ares' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0079

Updates of 'c-ares' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2021-3.0-0282

Updates of 'c-ares' packages of Photon OS have been released...

Domain Hijacking

c-ares is vulnerable to Domain Hijacking. Missing input validation of host names returned by Domain Name Servers in the c-ares library can lead to output of wrong hostnames leading to Domain Hijacking...

Debian DLA-2738-1 : c-ares - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2738 advisory. An issue has been found in c-ares, an asynchronous name resolver. Missing input validation of host names returned by Domain Name Servers can lead to output of wrong...

Ubuntu: Security Advisory (USN-5034-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3672

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as we...