{"id":"CVE-2017-1000381","details":"The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.","modified":"2026-07-10T12:00:29.848597712Z","published":"2017-07-07T17:29:00.307Z","related":["SUSE-SU-2017:1792-1","SUSE-SU-2017:2168-1","SUSE-SU-2019:14246-1","openSUSE-SU-2024:10668-1"],"database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"4.0.0"},{"last_affected":"4.1.2"},{"introduced":"4.2.0"},{"fixed":"4.8.4"},{"introduced":"5.0.0"},{"last_affected":"5.12.0"},{"introduced":"6.0.0"},{"last_affected":"6.8.1"},{"introduced":"6.9.0"},{"fixed":"6.11.1"},{"introduced":"7.0.0"},{"fixed":"7.10.1"},{"introduced":"8.0.0"},{"fixed":"8.1.4"}],"source":"CPE_RANGE","vendor_product":"nodejs:node.js","cpes":["cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/99148"},{"type":"ADVISORY","url":"https://c-ares.haxx.se/0616.patch"},{"type":"ADVISORY","url":"https://c-ares.haxx.se/adv_20170620.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/c-ares/c-ares","events":[{"introduced":"f037316e4beb11ad208dfadea6ff97e610940ac7"},{"last_affected":"4ef6817c76dcae00edc131ed966f580db1c5ee8f"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:c-ares:c-ares:1.8.0:*:*:*:*:*:*:*","cpe:2.3:a:c-ares:c-ares:1.9.0:*:*:*:*:*:*:*","cpe:2.3:a:c-ares:c-ares:1.9.1:*:*:*:*:*:*:*","cpe:2.3:a:c-ares:c-ares:1.10.0:*:*:*:*:*:*:*","cpe:2.3:a:c-ares:c-ares:1.12.0:*:*:*:*:*:*:*","cpe:2.3:a:c-ares_project:c-ares:1.11.0:*:*:*:*:*:*:*","cpe:2.3:a:c-ares_project:c-ares:1.11.0:rc1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.8.0"},{"last_affected":"1.8.0"},{"introduced":"1.9.0"},{"last_affected":"1.9.0"},{"introduced":"1.9.1"},{"last_affected":"1.9.1"},{"introduced":"1.10.0"},{"last_affected":"1.10.0"},{"introduced":"1.12.0"},{"last_affected":"1.12.0"},{"introduced":"1.11.0"},{"last_affected":"1.11.0"},{"introduced":"1.11.0-rc1"},{"last_affected":"1.11.0-rc1"}]}}],"versions":["1.10.0","1.11.0","1.11.0-rc1","1.12.0","1.8.0","1.9.0","1.9.1","cares-1_11_0-rc1","cares-1_10_0","cares-1_9_1","cares-1_9_0","cares-1_8_0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000381.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}