CVE:CVE-2021-3672
CNNVD:CNNVD-202108-883
libcares2是openSUSE项目的一个 C 库，可以异步执行 DNS 请求和名称解析。
libcares2 存在跨站脚本漏洞，该漏洞源于对主机名的输入验证不当。
solution:Upgrade c-ares_project c-ares to a higher version than 1.17.2,and avoid the version [1.0.0,1.17.2); Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade redhat enterprise_linux to a higher version than 7.0,7.7,8.0,and avoid the version 7.0,7.7,8.0; Upgrade redhat enterprise_linux_computer_node to a higher version than 1,and avoid the version 1; Upgrade redhat enterprise_linux_eus to a higher version than 7.7,8.1,8.2,8.4,and avoid the version 7.7,8.1,8.2,8.4; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_ibm_z_systems_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_tus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_workstation to a higher version than 1,and avoid the version 1; Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1); Upgrade nodejs node.js to a higher version than 12.12.0,12.22.5,14.14.0,14.17.5,16.6.2,and avoid the version [12.0.0,12.12.0],[12.13.0,12.22.5),[14.0.0,14.14.0],[14.15.0,14.17.5),[16.0.0,16.6.2); Upgrade pgbouncer pgbouncer to a higher version than 1.17.0,and avoid the version (,1.17.0]