CVE-2017-1000381

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-1000381
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000381.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-1000381
Downstream
Related
Published
2017-07-07T17:29:00.307Z
Modified
2026-05-12T04:01:02.579337Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

The c-ares function ares_parse_naptr_reply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "introduced": "4.0.0"
                },
                {
                    "last_affected": "4.1.2"
                },
                {
                    "introduced": "5.0.0"
                },
                {
                    "last_affected": "5.12.0"
                },
                {
                    "introduced": "6.0.0"
                },
                {
                    "last_affected": "6.8.1"
                },
                {
                    "introduced": "7.0.0"
                },
                {
                    "fixed": "7.10.1"
                },
                {
                    "introduced": "8.0.0"
                },
                {
                    "fixed": "8.1.4"
                }
            ],
            "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*"
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "introduced": "4.2.0"
                },
                {
                    "fixed": "4.8.4"
                },
                {
                    "introduced": "6.9.0"
                },
                {
                    "fixed": "6.11.1"
                }
            ],
            "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*"
        }
    ]
}
References

Affected packages

Git / github.com/c-ares/c-ares

Affected ranges

Type
GIT
Repo
https://github.com/c-ares/c-ares
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f037316e4beb11ad208dfadea6ff97e610940ac7
Last affected
3b649328be5090e91211a8a4b6932be2c3e578e1
Last affected
b743f875d349890547900d0ec9060138aea324ec
Last affected
46fa9cad7984cb632c9f8776297fe4a86e19e0d8
Last affected
7691f773af79bf75a62d1863fd0f13ebf9dc51b1
Last affected
e7fe2744db383c4489b7adc2b74f8ec3069367e4
Last affected
4ef6817c76dcae00edc131ed966f580db1c5ee8f
Database specific 
{
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.0"
        },
        {
            "last_affected": "1.9.0"
        },
        {
            "last_affected": "1.9.1"
        },
        {
            "last_affected": "1.10.0"
        },
        {
            "last_affected": "1.12.0"
        },
        {
            "last_affected": "1.11.0"
        },
        {
            "last_affected": "1.11.0-rc1"
        }
    ],
    "cpe": [
        "cpe:2.3:a:c-ares:c-ares:1.8.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:c-ares:c-ares:1.9.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:c-ares:c-ares:1.9.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:c-ares:c-ares:1.10.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:c-ares:c-ares:1.12.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:c-ares_project:c-ares:1.11.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:c-ares_project:c-ares:1.11.0:rc1:*:*:*:*:*:*"
    ]
}

Affected versions

Other
c-ares-1_2_0
cares-1_10_0
cares-1_11_0
cares-1_11_0-rc1
cares-1_12_0
cares-1_1_0
cares-1_2_1
cares-1_3_1
cares-1_3_2
cares-1_4_0
cares-1_5_0
cares-1_5_1
cares-1_5_2
cares-1_5_3
cares-1_6_0
cares-1_7_0
cares-1_7_1
cares-1_7_2
cares-1_7_3
cares-1_7_4
cares-1_7_5
cares-1_8_0
cares-1_9_0
cares-1_9_1
curl-7_10_8
curl-7_11_0
curl-7_11_1
curl-7_12_0
curl-7_12_1
curl-7_12_2
curl-7_13_0
curl-7_13_1
curl-7_13_2
curl-7_14_0
curl-7_14_1
curl-7_15_0
curl-7_15_1
curl-7_15_3
curl-7_15_4
curl-7_15_5
curl-7_15_6-prepipeline
curl-7_16_0
curl-7_16_1
curl-7_16_2
curl-7_16_3
curl-7_16_4
curl-7_17_0
curl-7_17_1
curl-7_18_0
curl-7_18_1
curl-7_18_2
curl-7_19_0
curl-7_19_2
curl-7_19_3
curl-7_19_4
curl-7_19_5
curl-7_19_6
curl-7_19_7
curl-7_20_0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000381.json"