CVE-2025-62408
c-ares is an asynchronous resolver library.
Published Dec 8, 2025 · updated Oct 14, 2026 · c-ares c-ares
c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.
Timeline
Detection, updates, and resolution for this record.
Dec 8, 2025 · NIST NVD
Detected
c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.
Oct 14, 2026 · NIST NVD
Updated
c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.
Affected
- cpe c-ares/c-aresversion unspecified
Sources
- CVE.orgCVE-2025-62408
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-62408
30-day exploitation probability 0.4%
first.org - NIST NVDCVE-2025-62408
c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.
nvd.nist.gov