CVE-2025-62408Medium· 5.9▾ Sunlitc-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.
c-ares >= 1.32.3, < 1.34.6Upgrade past the affected range:
c-ares 1.34.6Connected by shared product, vendor, weakness, or advisory.
CVE-2023-1652High· 7.1A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel
CVE-2022-43552Medium· 5.9A use after free vulnerability exists in curl <7.87.0
CVE-2026-69186Medium· 5.3c-ares is an asynchronous resolver library
CVE-2026-69184High· 7.5c-ares is an asynchronous resolver library
CVE-2023-32233High· 7.8In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory
CVE-2023-6932High· 7.8A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object wh…