Withdrawn by the publisher.

Withdrawn by the publisher.

Affected: CleanStart: nodejs

Package nodejs version 6.11.1-r0 fixes 6 vulnerabilities: CVE-2017-1000381, CVE-2021-43803, CVE-2022-32212, CVE-2023-44487, CVE-2024-36138...

The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.

The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.

c-ares-devel-1.17.2-2.2 on GA media

nodejs: Constant Hashtable Seeds vulnerability c-ares: NAPTR parser out of bounds access

Security update for libcares2

Affected: Ubuntu:14.04:LTS: c-ares, Ubuntu:16.04:LTS: c-ares, Ubuntu:Pro:16.04:LTS: nodejs

The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.