MGASA-2021-0453
Advisory lineage Upstream: 1 Downstream: 0
Upstream
Published: 02 Oct 2021, 18:57
Last modified:16 Apr 2026, 04:24
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
02 Oct 2021, 18:57
Published
Vulnerability first disclosed
16 Apr 2026, 04:24
Last Modified
Vulnerability information updated
Description
Updated c-ares packages fix security vulnerability Missing input validation on hostnames returned by DNS servers. (CVE-2021-3672)
Affected Systems
- mageia•c-ares
< 1.17.1-1.1.mga8
References (7)
- https://advisories.mageia.org/MGASA-2021-0453.html
- https://bugs.mageia.org/show_bug.cgi?id=29350
- https://c-ares.haxx.se/adv_20210810.html
- https://www.debian.org/security/2021/dsa-4954
- https://ubuntu.com/security/notices/USN-5034-1
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4F2ZKNNMGENSNMAS5CDHA3CDDRAXF3AQ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KPERAVSVZ542L4S6OA2QPUXNAJ4F2M5X/