CVE-2017-1000381

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-1000381
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000381.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000381
Downstream
Related
Published
2017-07-07T17:29:00.307Z
Modified
2026-03-13T22:22:26.855877Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

The c-ares function ares_parse_naptr_reply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.

References

Affected packages

Git / github.com/c-ares/c-ares

Affected ranges

Type
GIT
Repo
https://github.com/c-ares/c-ares
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f037316e4beb11ad208dfadea6ff97e610940ac7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b649328be5090e91211a8a4b6932be2c3e578e1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b743f875d349890547900d0ec9060138aea324ec
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
46fa9cad7984cb632c9f8776297fe4a86e19e0d8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7691f773af79bf75a62d1863fd0f13ebf9dc51b1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e7fe2744db383c4489b7adc2b74f8ec3069367e4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4ef6817c76dcae00edc131ed966f580db1c5ee8f
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.12.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.0-rc1"
        }
    ]
}
Type
GIT
Repo
https://github.com/nodejs/node
Events
Introduced
f9f837885343a2a3f5ba2b8c510eaac395c8c865
Last affected
85df6ada477715020dbd22e2fb5e687d84d663ff
Introduced
6dc12b1042d5d4727f77e8a1c5758dab91400069
Fixed
808569884eda590339617e543cc8076e5d91c6a2
Introduced
384e6c2dfe968002800bc3d3224a57aa19ffdfee
Last affected
325e1194ce111d43b31dfdf2e2944a73411276d9
Introduced
ce3e3c5fe15479475c068482c48eb9cbf1ac9df5
Last affected
c6a397bce63fc026421e1515b98eec9b8b5a8468
Introduced
6b1c40be84fbe5ea404f25e4e340a0c1fe67a60a
Fixed
d2d9581eedd6fa2b9fdb26c88c715a526ba5ca29
Introduced
362fe010fe8f6feb0030e1e02c689b501e11ddb7
Fixed
23cb8a0af031b0a6e903daf6611419a135fcca7c
Introduced
0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba
Fixed
03a2f0c462aedcf4aaaa077c6b79791faa36bce0
Database specific 
{
    "versions": [
        {
            "introduced": "4.0.0"
        },
        {
            "last_affected": "4.1.2"
        },
        {
            "introduced": "4.2.0"
        },
        {
            "fixed": "4.8.4"
        },
        {
            "introduced": "5.0.0"
        },
        {
            "last_affected": "5.12.0"
        },
        {
            "introduced": "6.0.0"
        },
        {
            "last_affected": "6.8.1"
        },
        {
            "introduced": "6.9.0"
        },
        {
            "fixed": "6.11.1"
        },
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.10.1"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "fixed": "8.1.4"
        }
    ]
}

Affected versions

Other
c-ares-1_2_0
cares-1_1_0
cares-1_2_1
cares-1_3_1
cares-1_3_2
cares-1_4_0
cares-1_5_0
cares-1_5_1
cares-1_5_2
cares-1_5_3
cares-1_6_0
cares-1_7_0
cares-1_7_1
cares-1_7_2
cares-1_7_3
cares-1_7_4
cares-1_7_5
cares-1_8_0
curl-7_10_8
curl-7_11_0
curl-7_11_1
curl-7_12_0
curl-7_12_1
curl-7_12_2
curl-7_13_0
curl-7_13_1
curl-7_13_2
curl-7_14_0
curl-7_14_1
curl-7_15_0
curl-7_15_1
curl-7_15_3
curl-7_15_4
curl-7_15_5
curl-7_15_6-prepipeline
curl-7_16_0
curl-7_16_1
curl-7_16_2
curl-7_16_3
curl-7_16_4
curl-7_17_0
curl-7_17_1
curl-7_18_0
curl-7_18_1
curl-7_18_2
curl-7_19_0
curl-7_19_2
curl-7_19_3
curl-7_19_4
curl-7_19_5
curl-7_19_6
curl-7_19_7
curl-7_20_0
v4.*
v4.0.0
v4.1.0
v4.1.1
v4.1.2
v4.2.0
v4.2.1
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.3.0
v4.3.1
v4.3.2
v4.4.0
v4.4.1
v4.4.2
v4.4.3
v4.4.4
v4.4.5
v4.4.6
v4.4.7
v4.5.0
v4.6.0
v4.6.1
v4.6.2
v4.7.0
v4.7.1
v4.7.2
v4.7.3
v4.8.0
v4.8.1
v4.8.2
v4.8.3
v5.*
v5.0.0
v5.1.0
v5.1.1
v5.10.0
v5.10.1
v5.11.1
v5.12.0
v5.2.0
v5.3.0
v5.4.0
v5.4.1
v5.5.0
v5.6.0
v5.7.0
v5.7.1
v5.8.0
v5.9.0
v5.9.1
v6.*
v6.0.0
v6.1.0
v6.10.0
v6.10.1
v6.10.2
v6.10.3
v6.11.0
v6.2.0
v6.2.1
v6.2.2
v6.3.0
v6.3.1
v6.4.0
v6.5.0
v6.6.0
v6.7.0
v6.8.0
v6.8.1
v6.9.0
v6.9.1
v6.9.2
v6.9.3
v6.9.4
v6.9.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000381.json"