CVE-2017-1000381: Infoleak
The c-ares function aresparsenaptrreply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1000381?
CVE-2017-1000381 has a medium severity rating due to the potential for memory exposure.
How do I fix CVE-2017-1000381?
To fix CVE-2017-1000381, update affected F5 BIG-IP and c-ares software to the latest patched versions.
What products are affected by CVE-2017-1000381?
CVE-2017-1000381 affects specific versions of F5 BIG-IP and c-ares, particularly versions 1.8.0 through 1.12.0 of c-ares.
What are the potential impacts of CVE-2017-1000381?
The potential impacts of CVE-2017-1000381 include unauthorized memory access and possible exploitation if a crafted DNS response is processed.
Is CVE-2017-1000381 actively being exploited?
As of the last known reports, there is no evidence that CVE-2017-1000381 is actively being exploited in the wild.