nodejs
diff --git a/‎lib/internal/dns/utils.js‎
Lines changed: 5 additions & 3 deletions b/‎lib/internal/dns/utils.js‎
Lines changed: 5 additions & 3 deletions
diff --git a/‎test/parallel/test-dns.js‎
Lines changed: 16 additions & 0 deletions b/‎test/parallel/test-dns.js‎
Lines changed: 16 additions & 0 deletions
@@ -24,6 +24,7 @@ const {
   validateArray,
   validateInt32,
   validateOneOf,
+  validatePort,
   validateString,
   validateUint32,
 } = require('internal/validators');
@@ -129,6 +130,7 @@ class ResolverBase {
         if (ipVersion !== 0) {
           const port = NumberParseInt(
             RegExpPrototypeSymbolReplace(addrSplitRE, serv, '$2')) || IANA_DNS_PORT;
+          validatePort(port);
           return ArrayPrototypePush(newSet, [ipVersion, match[1], port]);
         }
       }
@@ -138,13 +140,13 @@ class ResolverBase {
 
       if (addrSplitMatch) {
         const hostIP = addrSplitMatch[1];
-        const port = addrSplitMatch[2] || IANA_DNS_PORT;
+        const port = NumberParseInt(addrSplitMatch[2]) || IANA_DNS_PORT;
 
         ipVersion = isIP(hostIP);
 
         if (ipVersion !== 0) {
-          return ArrayPrototypePush(
-            newSet, [ipVersion, hostIP, NumberParseInt(port)]);
+          validatePort(port);
+          return ArrayPrototypePush(newSet, [ipVersion, hostIP, port]);
         }
       }
 
 
@@ -90,6 +90,22 @@ assert(existing.length > 0);
   });
 }
 
+{
+  // Out-of-range ports, which should throw a clean error.
+  const invalidPorts = [2 ** 16, 2 ** 32, 2 ** 64];
+  invalidPorts.forEach((port) => {
+    assert.throws(
+      () => {
+        dns.setServers([`1.2.3.4:${port}`]);
+      },
+      {
+        name: 'RangeError',
+        code: 'ERR_SOCKET_BAD_PORT'
+      }
+    );
+  });
+}
+
 const goog = [
   '8.8.8.8',
   '8.8.4.4',