Information Disclosure

Node.js is vulnerable to an out-of-bounds read. The libuv's uvidnatoascii function which converts strings to ASCII is called by Node's dns module's lookup function and can lead to information disclosures or crashes...