high7.5
CVE-2017-1000381
The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer …
Impact
The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| C-Ares | C-Ares | Versions 1.8.0, 1.9.0, 1.9.1, 1.10.0, 1.12.0 |
| C-Ares Project | C-Ares | Version 1.11.0 |
| Nodejs | Node.Js | from 4.0.0 through 4.1.2 from 4.2.0 before 4.8.4 from 5.0.0 through 5.12.0 from 6.0.0 through 6.8.1 from 6.9.0 before 6.11.1 from 7.0.0 before 7.10.1 |