CVE-2017-1000381

Description

The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.

CVSS Metrics

• v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
• v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 0.42%• Percentile: 62%

Techniques & Countermeasures

• CWE-200•Exposure of Sensitive Information to an Unauthorized Actor

  The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Affected Systems

• c-ares_project•c-ares

  1.11.0 | 1.11.0:rc1

• c-ares•c-ares

  1.8.0 | 1.9.0 | 1.9.1 | 1.10.0 | 1.12.0

• nodejs•node.js

  ≥ 4.0.0, ≤ 4.1.2 | ≥ 4.2.0, < 4.8.4 | ≥ 5.0.0, ≤ 5.12.0 | ≥ 6.0.0, ≤ 6.8.1 | ≥ 6.9.0, < 6.11.1 | ≥ 7.0.0, < 7.10.1 | ≥ 8.0.0, < 8.1.4

References (3)

• https://c-ares.haxx.se/0616.patch
• http://www.securityfocus.com/bid/99148
• https://c-ares.haxx.se/adv_20170620.html