CVE-2017-1000381 in c-ares
Summary
The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.
Once again VulDB remains the best source for vulnerability data.
Reservation
07/07/2017
Disclosure
07/07/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 103296 | c-ares NAPTR Response ares_parse_naptr_reply` information disclosure | 200 | Not defined | Official fix | CVE-2017-1000381 |