{"id":"ALPINE-CVE-2025-62408","details":"c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5  terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.","modified":"2025-12-13T13:29:58.232845Z","published":"2025-12-08T22:15:52.620Z","upstream":["CVE-2025-62408"],"references":[{"type":"ADVISORY","url":"https://security.alpinelinux.org/vuln/CVE-2025-62408"}],"affected":[{"package":{"name":"c-ares","ecosystem":"Alpine:v3.21","purl":"pkg:apk/alpine/c-ares?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.6-r0"}]}],"versions":["1.10.0-r0","1.10.0-r1","1.11.0-r0","1.12.0-r0","1.13.0-r0","1.13.0-r1","1.14.0-r0","1.15.0-r0","1.15.0-r1","1.16.0-r0","1.16.1-r0","1.17.1-r0","1.17.1-r1","1.17.2-r0","1.18.1-r0","1.18.1-r1","1.19.0-r0","1.19.0-r1","1.19.0-r2","1.19.0-r3","1.19.0-r4","1.19.1-r0","1.19.1-r1","1.20.1-r0","1.21.0-r0","1.22.0-r0","1.22.1-r0","1.23.0-r0","1.24.0-r0","1.25.0-r0","1.25.0-r1","1.26.0-r0","1.27.0-r0","1.28.1-r0","1.29.0-r0","1.31.0-r0","1.32.0-r0","1.32.1-r0","1.32.2-r0","1.32.3-r0","1.33.0-r0","1.33.1-r0","1.34.1-r0","1.34.2-r0","1.34.2-r1","1.34.2-r2","1.34.3-r0","1.34.4-r0","1.34.5-r0","1.6.0-r0","1.6.0-r1","1.7.0-r0","1.7.0-r1","1.7.3-r0","1.7.4-r0","1.7.4-r1","1.7.4-r2","1.7.5-r0","1.8.0-r0","1.9.0-r0","1.9.1-r0"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2025-62408.json"}},{"package":{"name":"c-ares","ecosystem":"Alpine:v3.22","purl":"pkg:apk/alpine/c-ares?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.6-r0"}]}],"versions":["1.10.0-r0","1.10.0-r1","1.11.0-r0","1.12.0-r0","1.13.0-r0","1.13.0-r1","1.14.0-r0","1.15.0-r0","1.15.0-r1","1.16.0-r0","1.16.1-r0","1.17.1-r0","1.17.1-r1","1.17.2-r0","1.18.1-r0","1.18.1-r1","1.19.0-r0","1.19.0-r1","1.19.0-r2","1.19.0-r3","1.19.0-r4","1.19.1-r0","1.19.1-r1","1.20.1-r0","1.21.0-r0","1.22.0-r0","1.22.1-r0","1.23.0-r0","1.24.0-r0","1.25.0-r0","1.25.0-r1","1.26.0-r0","1.27.0-r0","1.28.1-r0","1.29.0-r0","1.31.0-r0","1.32.0-r0","1.32.1-r0","1.32.2-r0","1.32.3-r0","1.33.0-r0","1.33.1-r0","1.34.1-r0","1.34.2-r0","1.34.2-r1","1.34.2-r2","1.34.3-r0","1.34.4-r0","1.34.5-r0","1.6.0-r0","1.6.0-r1","1.7.0-r0","1.7.0-r1","1.7.3-r0","1.7.4-r0","1.7.4-r1","1.7.4-r2","1.7.5-r0","1.8.0-r0","1.9.0-r0","1.9.1-r0"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2025-62408.json"}},{"package":{"name":"c-ares","ecosystem":"Alpine:v3.23","purl":"pkg:apk/alpine/c-ares?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.6-r0"}]}],"versions":["1.10.0-r0","1.10.0-r1","1.11.0-r0","1.12.0-r0","1.13.0-r0","1.13.0-r1","1.14.0-r0","1.15.0-r0","1.15.0-r1","1.16.0-r0","1.16.1-r0","1.17.1-r0","1.17.1-r1","1.17.2-r0","1.18.1-r0","1.18.1-r1","1.19.0-r0","1.19.0-r1","1.19.0-r2","1.19.0-r3","1.19.0-r4","1.19.1-r0","1.19.1-r1","1.20.1-r0","1.21.0-r0","1.22.0-r0","1.22.1-r0","1.23.0-r0","1.24.0-r0","1.25.0-r0","1.25.0-r1","1.26.0-r0","1.27.0-r0","1.28.1-r0","1.29.0-r0","1.31.0-r0","1.32.0-r0","1.32.1-r0","1.32.2-r0","1.32.3-r0","1.33.0-r0","1.33.1-r0","1.34.1-r0","1.34.2-r0","1.34.2-r1","1.34.2-r2","1.34.3-r0","1.34.4-r0","1.34.5-r0","1.6.0-r0","1.6.0-r1","1.7.0-r0","1.7.0-r1","1.7.3-r0","1.7.4-r0","1.7.4-r1","1.7.4-r2","1.7.5-r0","1.8.0-r0","1.9.0-r0","1.9.1-r0"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2025-62408.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}