Lucene search
Veracode Vulnerability DatabaseVERACODE:12679HistoryJan 15, 2019 - 9:20 a.m.
Information Disclosure
2019-01-1509:20:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.002 Low
EPSS
Percentile
61.4%
rh-nodejs6-nodejs is vulnerable to information disclosure attacks. The vulnerability exists as the c-ares function ares_parse_naptr_reply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rh-nodejs6-nodejs | eq | 6.9.1__3.el6 | |
| rh-nodejs6-nodejs | eq | 6.9.1__2.el7 | |
| rh-nodejs6-nodejs | eq | 6.9.1__3.el6 | |
| rh-nodejs6-nodejs | eq | 6.9.1__2.el7 |
Related
openvas
openvas
Ubuntu: Security Advisory (USN-3395-1)
2017-08-18 00:00:00
Fedora Update for c-ares FEDORA-2017-4932c9b886
2017-07-21 00:00:00
Fedora Update for nodejs FEDORA-2017-7c1621d2e8
2017-08-04 00:00:00
ubuntu
ubuntu
c-ares vulnerability
2017-08-17 00:00:00
Node.js vulnerabilities
2021-03-15 00:00:00
prion
prion
Design/Logic Flaw
2017-07-07 17:29:00
debian
debian
[SECURITY] [DLA 998-1] c-ares security update
2017-06-22 20:13:18
fedora
fedora
[SECURITY] Fedora 24 Update: nodejs-4.8.4-6.fc24
2017-07-24 22:50:16
[SECURITY] Fedora 26 Update: c-ares-1.13.0-1.fc26
2017-06-22 13:42:03
[SECURITY] Fedora 24 Update: c-ares-1.13.0-1.fc24
2017-07-17 01:50:14
cloudfoundry
cloudfoundry
Multiple Node.js Vulnerabilities | Cloud Foundry
2017-07-20 00:00:00
nessus
nessus
Fedora 24 : c-ares (2017-4932c9b886)
2017-07-21 00:00:00
Debian DLA-998-1 : c-ares security update
2017-06-23 00:00:00
SUSE SLED12 / SLES12 Security Update : libcares2 (SUSE-SU-2017:1792-1)
2017-07-07 00:00:00
amazon
amazon
Medium: c-ares
2017-07-20 01:22:00
archlinux
archlinux
[ASA-201707-21] c-ares: information disclosure
2017-07-18 00:00:00
ubuntucve
ubuntucve
CVE-2017-1000381
2017-07-07 00:00:00
osv
osv
c-ares - security update
2017-06-22 00:00:00
CVE-2017-1000381
2017-07-07 17:29:00
nodejs vulnerabilities
2021-03-15 21:18:37
redhatcve
redhatcve
CVE-2017-1000381
2019-11-02 21:39:49
debiancve
debiancve
CVE-2017-1000381
2017-07-07 17:29:00
nvd
nvd
CVE-2017-1000381
2017-07-07 17:29:00
cvelist
cvelist
CVE-2017-1000381
2017-07-07 17:00:00
mageia
mageia
Updated c-ares packages fix security vulnerability
2017-07-23 22:58:56
Updated nodejs packages fix security vulnerabilities
2019-09-15 16:24:16
alpinelinux
alpinelinux
CVE-2017-1000381
2017-07-07 17:29:00
cve
cve
CVE-2017-1000381
2017-07-07 17:29:00
ibm
ibm
altlinux
altlinux
Security fix for the ALT Linux 9 package c-ares version 1.13.0-alt1
2017-08-08 00:00:00
redhat
redhat
(RHSA-2017:2908) Moderate: rh-nodejs6-nodejs security update
2017-10-18 07:32:26
nodejsblog
nodejsblog
Security updates for all active release lines, July 2017
2017-07-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1811
2021-07-02 16:34:46
photon
photon
Critical Photon OS Security Update - PHSA-2017-0078
2017-10-19 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47