CVE-2025-31498
Fixed in a distro release EPSS <1%CVSS 8.3
c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue a query either due to a DNS Cookie Failure or when the upstream server does not properly support EDNS, or possibly on TCP queries if the remote closed the connection immediately after a response. If there was an issue trying to put that new transaction on the wire, it would close the connection handle, but read_answers() was still expecting the connection handle to be available to possibly dequeue other responses. In theory a remote attacker might be able to trigger this by flooding the target with ICMP UNREACHABLE packets if they also control the upstream nameserver and can return a result with one of those conditions, this has been untested. Otherwise only a local attacker might be able to change system behavior to make send()/write() return a failure condition. This vulnerability is fixed in 1.34.5.
Products: c-ares
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | nodejs | 1:22.15.0-1.el10_0 |
| AlmaLinux 10 | nodejs-devel | 1:22.15.0-1.el10_0 |
| AlmaLinux 10 | nodejs-docs | 1:22.15.0-1.el10_0 |
| AlmaLinux 10 | nodejs-full-i18n | 1:22.15.0-1.el10_0 |
| AlmaLinux 10 | nodejs-libs | 1:22.15.0-1.el10_0 |
| AlmaLinux 10 | nodejs-npm | 1:10.9.2-1.22.15.0.1.el10_0 |
| AlmaLinux 8 | nodejs | 1:22.15.0-1.module_el8.10.0+3986+a908e756 |
| AlmaLinux 8 | nodejs | 1:20.19.1-1.module_el8.10.0+3987+dbda4426 |
| AlmaLinux 8 | nodejs-devel | 1:20.19.1-1.module_el8.10.0+3987+dbda4426 |
| AlmaLinux 8 | nodejs-devel | 1:22.15.0-1.module_el8.10.0+3986+a908e756 |
| AlmaLinux 8 | nodejs-docs | 1:20.19.1-1.module_el8.10.0+3987+dbda4426 |
| AlmaLinux 8 | nodejs-docs | 1:22.15.0-1.module_el8.10.0+3986+a908e756 |
| AlmaLinux 8 | nodejs-full-i18n | 1:20.19.1-1.module_el8.10.0+3987+dbda4426 |
| AlmaLinux 8 | nodejs-full-i18n | 1:22.15.0-1.module_el8.10.0+3986+a908e756 |
| AlmaLinux 8 | nodejs-libs | 1:22.15.0-1.module_el8.10.0+3986+a908e756 |
| AlmaLinux 8 | nodejs-nodemon | 3.0.1-1.module_el8.10.0+3982+85c136aa |
| AlmaLinux 8 | nodejs-nodemon | 3.0.1-1.module_el8.10.0+3983+391a1a04 |
| AlmaLinux 8 | nodejs-packaging | 2021.06-4.module_el8.10.0+3987+dbda4426 |
| AlmaLinux 8 | nodejs-packaging | 2021.06-4.module_el8.10.0+3961+6a788e57 |
| AlmaLinux 8 | nodejs-packaging-bundler | 2021.06-4.module_el8.10.0+3958+472a6467 |
| AlmaLinux 8 | nodejs-packaging-bundler | 2021.06-4.module_el8.10.0+3961+6a788e57 |
| AlmaLinux 8 | npm | 1:10.8.2-1.20.19.1.1.module_el8.10.0+3987+dbda4426 |
| AlmaLinux 8 | npm | 1:10.9.2-1.22.15.0.1.module_el8.10.0+3986+a908e756 |
| AlmaLinux 8 | v8-12.4-devel | 3:12.4.254.21-1.22.15.0.1.module_el8.10.0+3986+a908e756 |
| AlmaLinux 9 | nodejs | 1:22.15.0-1.module_el9.6.0+164+2d89b8ed |
| AlmaLinux 9 | nodejs | 1:20.19.1-1.module_el9.6.0+163+d268fe53 |
| AlmaLinux 9 | nodejs-devel | 1:20.19.1-1.module_el9.6.0+163+d268fe53 |
| AlmaLinux 9 | nodejs-devel | 1:22.15.0-1.module_el9.6.0+164+2d89b8ed |
| AlmaLinux 9 | nodejs-docs | 1:20.19.1-1.module_el9.6.0+163+d268fe53 |
| AlmaLinux 9 | nodejs-docs | 1:22.15.0-1.module_el9.6.0+164+2d89b8ed |
| AlmaLinux 9 | nodejs-full-i18n | 1:20.19.1-1.module_el9.6.0+163+d268fe53 |
| AlmaLinux 9 | nodejs-full-i18n | 1:22.15.0-1.module_el9.6.0+164+2d89b8ed |
| AlmaLinux 9 | nodejs-libs | 1:22.15.0-1.module_el9.6.0+164+2d89b8ed |
| AlmaLinux 9 | nodejs-nodemon | 3.0.1-1.module_el9.5.0+139+09296491 |
| AlmaLinux 9 | nodejs-nodemon | 3.0.1-1.module_el9.5.0+125+8dc38870 |
| AlmaLinux 9 | nodejs-packaging | 2021.06-4.module_el9.6.0+162+8dc602e5 |
| AlmaLinux 9 | nodejs-packaging | 2021.06-4.module_el9.5.0+139+09296491 |
| AlmaLinux 9 | nodejs-packaging-bundler | 2021.06-4.module_el9.6.0+162+8dc602e5 |
| AlmaLinux 9 | nodejs-packaging-bundler | 2021.06-4.module_el9.5.0+139+09296491 |
| AlmaLinux 9 | npm | 1:10.9.2-1.22.15.0.1.module_el9.6.0+164+2d89b8ed |
| AlmaLinux 9 | npm | 1:10.8.2-1.20.19.1.1.module_el9.6.0+163+d268fe53 |
| AlmaLinux 9 | v8-12.4-devel | 3:12.4.254.21-1.22.15.0.1.module_el9.6.0+164+2d89b8ed |
| Alpine 3.21 | c-ares | 1.34.5-r0 |
| Alpine 3.22 | c-ares | 1.34.5-r0 |
| Alpine 3.23 | c-ares | 1.34.5-r0 |
| Alpine 3.24 | c-ares | 1.34.5-r0 |
| Amazon Linux 2023 | nodejs20 | 1:20.19.0-1.amzn2023.0.1 |
| Amazon Linux 2023 | nodejs20-devel | 1:20.19.0-1.amzn2023.0.1 |
| Amazon Linux 2023 | nodejs20-docs | 1:20.19.0-1.amzn2023.0.1 |
| Amazon Linux 2023 | nodejs20-full-i18n | 1:20.19.0-1.amzn2023.0.1 |
| Amazon Linux 2023 | nodejs20-libs | 1:20.19.0-1.amzn2023.0.1 |
| Amazon Linux 2023 | nodejs20-npm | 1:10.8.2-1.20.19.0.1.amzn2023.0.1 |
| Amazon Linux 2023 | v8-11.3-devel | 3:11.3.244.8-1.20.19.0.1.amzn2023.0.1 |
| Debian 13 | c-ares | 1.34.5-1 |
| Debian 14 | c-ares | 1.34.5-1 |
| Red Hat Enterprise Linux 10.0 | nodejs | 1:22.15.0-1.el10_0 |
| Red Hat Enterprise Linux 10.0 | nodejs-debuginfo | 1:22.15.0-1.el10_0 |
| Red Hat Enterprise Linux 10.0 | nodejs-devel | 1:22.15.0-1.el10_0 |
| Red Hat Enterprise Linux 10.0 | nodejs-docs | 1:22.15.0-1.el10_0 |
| Red Hat Enterprise Linux 10.0 | nodejs-full-i18n | 1:22.15.0-1.el10_0 |
| Red Hat Enterprise Linux 10.0 | nodejs-libs | 1:22.15.0-1.el10_0 |
| Red Hat Enterprise Linux 10.0 | nodejs-libs-debuginfo | 1:22.15.0-1.el10_0 |
| Red Hat Enterprise Linux 10.0 | nodejs-npm | 1:10.9.2-1.22.15.0.1.el10_0 |
| Red Hat Enterprise Linux 10.0 | nodejs22 | 1:22.15.0-1.el10_0 |
| Red Hat Enterprise Linux 10.0 | nodejs22-debuginfo | 1:22.15.0-1.el10_0 |
| Red Hat Enterprise Linux 10.0 | nodejs22-debugsource | 1:22.15.0-1.el10_0 |
| Red Hat Enterprise Linux 8 | nodejs | 1:20.19.1-1.module+el8.10.0+23054+5431297f |
| Red Hat Enterprise Linux 8 | nodejs | 1:22.15.0-1.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | nodejs-debuginfo | 1:22.15.0-1.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | nodejs-debuginfo | 1:20.19.1-1.module+el8.10.0+23054+5431297f |
| Red Hat Enterprise Linux 8 | nodejs-debugsource | 1:22.15.0-1.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | nodejs-debugsource | 1:20.19.1-1.module+el8.10.0+23054+5431297f |
| Red Hat Enterprise Linux 8 | nodejs-devel | 1:22.15.0-1.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | nodejs-devel | 1:20.19.1-1.module+el8.10.0+23054+5431297f |
| Red Hat Enterprise Linux 8 | nodejs-docs | 1:20.19.1-1.module+el8.10.0+23054+5431297f |
| Red Hat Enterprise Linux 8 | nodejs-docs | 1:22.15.0-1.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | nodejs-full-i18n | 1:20.19.1-1.module+el8.10.0+23054+5431297f |
| Red Hat Enterprise Linux 8 | nodejs-full-i18n | 1:22.15.0-1.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | nodejs-libs | 1:22.15.0-1.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | nodejs-libs-debuginfo | 1:22.15.0-1.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+22904+d0fedeff |
| Red Hat Enterprise Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | nodejs-packaging | 0:2021.06-4.module+el8.10.0+22904+d0fedeff |
| Red Hat Enterprise Linux 8 | nodejs-packaging | 0:2021.06-4.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | nodejs-packaging-bundler | 0:2021.06-4.module+el8.10.0+22904+d0fedeff |
| Red Hat Enterprise Linux 8 | nodejs-packaging-bundler | 0:2021.06-4.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | npm | 1:10.9.2-1.22.15.0.1.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 8 | npm | 1:10.8.2-1.20.19.1.1.module+el8.10.0+23054+5431297f |
| Red Hat Enterprise Linux 8 | v8-12.4-devel | 3:12.4.254.21-1.22.15.0.1.module+el8.10.0+23068+28ff2340 |
| Red Hat Enterprise Linux 9 | nodejs | 1:20.19.1-1.module+el9.6.0+23053+4195b0b2 |
| Red Hat Enterprise Linux 9 | nodejs | 1:22.15.0-1.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | nodejs-debuginfo | 1:20.19.1-1.module+el9.6.0+23053+4195b0b2 |
| Red Hat Enterprise Linux 9 | nodejs-debuginfo | 1:22.15.0-1.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | nodejs-debugsource | 1:20.19.1-1.module+el9.6.0+23053+4195b0b2 |
| Red Hat Enterprise Linux 9 | nodejs-debugsource | 1:22.15.0-1.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | nodejs-devel | 1:20.19.1-1.module+el9.6.0+23053+4195b0b2 |
| Red Hat Enterprise Linux 9 | nodejs-devel | 1:22.15.0-1.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | nodejs-docs | 1:22.15.0-1.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | nodejs-docs | 1:20.19.1-1.module+el9.6.0+23053+4195b0b2 |
| Red Hat Enterprise Linux 9 | nodejs-full-i18n | 1:22.15.0-1.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | nodejs-full-i18n | 1:20.19.1-1.module+el9.6.0+23053+4195b0b2 |
| Red Hat Enterprise Linux 9 | nodejs-libs | 1:22.15.0-1.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | nodejs-libs-debuginfo | 1:22.15.0-1.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.3.0.z+20478+84a9f781 |
| Red Hat Enterprise Linux 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | nodejs-packaging | 0:2021.06-4.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | nodejs-packaging | 0:2021.06-4.module+el9.3.0+19518+63aad52d |
| Red Hat Enterprise Linux 9 | nodejs-packaging-bundler | 0:2021.06-4.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | nodejs-packaging-bundler | 0:2021.06-4.module+el9.3.0+19518+63aad52d |
| Red Hat Enterprise Linux 9 | npm | 1:10.9.2-1.22.15.0.1.module+el9.6.0+23062+9e7801b9 |
| Red Hat Enterprise Linux 9 | npm | 1:10.8.2-1.20.19.1.1.module+el9.6.0+23053+4195b0b2 |
| Red Hat Enterprise Linux 9 | v8-12.4-devel | 3:12.4.254.21-1.22.15.0.1.module+el9.6.0+23062+9e7801b9 |
| Red Hat rhel eus 9.4 | nodejs | 1:20.18.2-2.module+el9.4.0+23089+aaa18a20 |
| Red Hat rhel eus 9.4 | nodejs-debuginfo | 1:20.18.2-2.module+el9.4.0+23089+aaa18a20 |
| Red Hat rhel eus 9.4 | nodejs-debugsource | 1:20.18.2-2.module+el9.4.0+23089+aaa18a20 |
| Red Hat rhel eus 9.4 | nodejs-devel | 1:20.18.2-2.module+el9.4.0+23089+aaa18a20 |
| Red Hat rhel eus 9.4 | nodejs-docs | 1:20.18.2-2.module+el9.4.0+23089+aaa18a20 |
| Red Hat rhel eus 9.4 | nodejs-full-i18n | 1:20.18.2-2.module+el9.4.0+23089+aaa18a20 |
| Red Hat rhel eus 9.4 | nodejs-nodemon | 0:3.0.1-1.module+el9.3.0.z+20478+84a9f781 |
| Red Hat rhel eus 9.4 | nodejs-packaging | 0:2021.06-4.module+el9.3.0+19518+63aad52d |
| Red Hat rhel eus 9.4 | nodejs-packaging-bundler | 0:2021.06-4.module+el9.3.0+19518+63aad52d |
| Red Hat rhel eus 9.4 | npm | 1:10.8.2-1.20.18.2.2.module+el9.4.0+23089+aaa18a20 |
| Rocky Linux 8 | nodejs | 1:20.19.1-1.module+el8.10.0+1972+57cf735f |
| Rocky Linux 8 | nodejs | 1:22.15.0-1.module+el8.10.0+1971+0bb08ece |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.9.0+1760+903d54b9 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1989+e60144d9 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1988+437f3d23 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1666+930e28e8 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1667+4a788d89 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1823+b5789597 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1824+532140ee |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1924+614dc87f |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1935+d3cbe60f |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-4.module+el8.10.0+1667+4a788d89 |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-4.module+el8.10.0+1823+b5789597 |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-4.module+el8.10.0+1824+532140ee |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-4.module+el8.10.0+1924+614dc87f |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-4.module+el8.10.0+1988+437f3d23 |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-4.module+el8.10.0+1989+e60144d9 |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-4.module+el8.9.0+1419+1f26ef47 |
| Rocky Linux 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.5.0+31785+5534beb0 |
| Rocky Linux 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.5.0+31770+0da7192d |
| Rocky Linux 9 | nodejs-packaging | 0:2021.06-4.module+el9.5.0+31770+0da7192d |
| Rocky Linux 9 | nodejs-packaging | 0:2021.06-4.module+el9.5.0+31786+d18c719d |
| Rocky Linux 9 | nodejs-packaging | 0:2021.06-4.module+el9.5.0+31785+5534beb0 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise Micro 5.3 | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise Micro 5.4 | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise Micro 5.5 | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | c-ares | 1.34.8-150000.3.29.1 |
| SUSE Linux Micro 6.0 | c-ares | 1.34.8-1.1 |
| SUSE Linux Micro 6.1 | c-ares | 1.34.8-slfo.1.1_1.1 |
| Ubuntu 25.04 | c-ares | 1.34.4-2.1ubuntu0.1 |
| openSUSE Tumbleweed | c-ares | 1.34.5-1.1 |