BaselineWatch
Desk

CVE-2025-62408

5.9 medium SSVC exploitation: none Analyzed

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.

Fix

Patch, vendor advisory and mitigation references on NVD 2

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 5.9 · c-aresNVD modified 2026-10-14 22:10

Affected (CPE criteria) 1

  • cpe:2.3:a:c-ares:c-ares:*:*:*:*:*:*:*:*

References 2