UpHeron
All vulnerabilities

Servers and applications

CVE-2025-62408

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.

Severity
Medium 5.9
Published
8 Dec 2025
Last changed
14 Oct 2026
Added to UpHeron
22 Oct 2026
Fixed in
1.34.6
Sources
NVD

Affected software

SoftwareAffected versions
c-aresServers and applications · cpe:a:c-ares:c-ares
  • From 1.32.3 before 1.34.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-62408
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-62408