CVE-2017-1000381: The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be trigger...

Security readout for executives and security teams

This vulnerability affects c-ares DNS response parsing. A specially crafted DNS NAPTR response could make the parser read beyond the provided packet buffer. The source bundle does not provide CVSS, affected versions, or confirmed real-world exploitation. Most exposure is indirect through applications, runtimes, or appliances bundling c-ares. Systems are more relevant if they perform NAPTR lookups or parse untrusted DNS replies. The bundle does not enumerate affected products or versions. Handle as a moderate dependency remediation item. Escalate if critical or internet-facing services use c-ares for NAPTR DNS parsing and cannot be quickly updated. Mitigation focus: Inventory direct and bundled use of c-ares.; Check vendor guidance for fixed c-ares versions containing the upstream patch.; Update or rebuild affected software with the corrected c-ares code..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.