MEDIUMCVSS 5.6

CVE-2021-3672

CVE-2021-3672 updated by NVD

Modified: 2026-09-20
Sources: nvd

Summary

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
Node.js	node.js	[object Object], [object Object], [object Object], [object Object], [object Object]	—

References

https://nvd.nist.gov/vuln/detail/CVE-2021-3672

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.