Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-62408

Fixed in a distro release EPSS <1%CVSS 5.9

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.

Published 2025-12-08 · CVE record · OSV

Products: c-ares

Distro releases

ReleasePackageFixed in
Alpine 3.21c-ares1.34.6-r0
Alpine 3.22c-ares1.34.6-r0
Alpine 3.23c-ares1.34.6-r0
Alpine 3.24c-ares1.34.6-r0
Amazon Linux 2023nodejs201:20.19.5-1.amzn2023.0.2
Amazon Linux 2023nodejs20-devel1:20.19.5-1.amzn2023.0.2
Amazon Linux 2023nodejs20-docs1:20.19.5-1.amzn2023.0.2
Amazon Linux 2023nodejs20-full-i18n1:20.19.5-1.amzn2023.0.2
Amazon Linux 2023nodejs20-libs1:20.19.5-1.amzn2023.0.2
Amazon Linux 2023nodejs20-npm1:10.8.2-1.20.19.5.1.amzn2023.0.2
Amazon Linux 2023nodejs221:22.21.1-1.amzn2023.0.2
Amazon Linux 2023nodejs22-devel1:22.21.1-1.amzn2023.0.2
Amazon Linux 2023nodejs22-docs1:22.21.1-1.amzn2023.0.2
Amazon Linux 2023nodejs22-full-i18n1:22.21.1-1.amzn2023.0.2
Amazon Linux 2023nodejs22-libs1:22.21.1-1.amzn2023.0.2
Amazon Linux 2023nodejs22-npm1:10.9.4-1.22.21.1.1.amzn2023.0.2
Amazon Linux 2023nodejs241:24.11.1-1.amzn2023.0.2
Amazon Linux 2023nodejs24-devel1:24.11.1-1.amzn2023.0.2
Amazon Linux 2023nodejs24-docs1:24.11.1-1.amzn2023.0.2
Amazon Linux 2023nodejs24-full-i18n1:24.11.1-1.amzn2023.0.2
Amazon Linux 2023nodejs24-libs1:24.11.1-1.amzn2023.0.2
Amazon Linux 2023nodejs24-npm1:11.6.2-1.24.11.1.1.amzn2023.0.2
Amazon Linux 2023v8-11.3-devel3:11.3.244.8-1.20.19.5.1.amzn2023.0.2
Amazon Linux 2023v8-12.4-devel3:12.4.254.21-1.22.21.1.1.amzn2023.0.2
Amazon Linux 2023v8-13.6-devel3:13.6.233.10-1.24.11.1.1.amzn2023.0.2
Debian 13c-ares1.34.5-1+deb13u1
Debian 14c-ares1.34.6-1
Red Hat hummingbird 1c-ares0:1.34.6-3.1.hum1
Red Hat hummingbird 1c-ares-devel0:1.34.6-3.1.hum1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSc-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSnodejs1818.20.8-150400.9.39.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSc-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSnodejs1818.20.8-150400.9.39.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSc-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSnodejs1818.20.8-150400.9.39.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSc-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSnodejs1818.20.8-150400.9.39.1
SUSE Linux Enterprise Micro 5.3c-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise Micro 5.4c-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise Micro 5.5c-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise Module for Basesystem 15 SP7c-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise Server 12 SP5-LTSSnodejs1818.20.8-8.44.1
SUSE Linux Enterprise Server 15 SP4-LTSSc-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise Server 15 SP4-LTSSnodejs1818.20.8-150400.9.39.1
SUSE Linux Enterprise Server 15 SP5-LTSSc-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise Server 15 SP5-LTSSnodejs1818.20.8-150400.9.39.1
SUSE Linux Enterprise Server 15 SP6-LTSSc-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5nodejs1818.20.8-8.44.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4c-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4nodejs1818.20.8-150400.9.39.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5c-ares1.34.8-150000.3.29.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5nodejs1818.20.8-150400.9.39.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6c-ares1.34.8-150000.3.29.1
SUSE Linux Micro 6.0c-ares1.34.8-1.1
SUSE Linux Micro 6.1c-ares1.34.8-slfo.1.1_1.1
Ubuntu 25.10c-ares1.34.5-1ubuntu0.1
openSUSE Tumbleweedc-ares1.34.6-1.1
openSUSE Tumbleweedistioctl1.28.2-1.1