The c-ares function ares_parse_naptr_reply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.

CPENameOperatorVersion
nodejseq6.11.0-r0
nodejseq4.4.5-r0
nodejseq6.9.2-r1
nodejseq5.11.0-r1
nodejseq4.4.4-r0
c-areseq1.7.5-r0
c-areseq1.7.4-r0
nodejseq4.2.6-r0
nodejseq4.3.1-r1
nodejseq0.12.2-r0

Name	Operator	Version
nodejs	eq	6.11.0-r0
nodejs	eq	4.4.5-r0
nodejs	eq	6.9.2-r1
nodejs	eq	5.11.0-r1
nodejs	eq	4.4.4-r0
c-ares	eq	1.7.5-r0
c-ares	eq	1.7.4-r0
nodejs	eq	4.2.6-r0
nodejs	eq	4.3.1-r1
nodejs	eq	0.12.2-r0