ALPINE-CVE-2025-62408
ALPINE-CVE-2025-62408
This page contains facts from public vulnerability sources. Check the original advisory before updating.
c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.
CVSS 5.9 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
c-ares Alpine:v3.21
- Affected ranges
- ECOSYSTEM: ≥ 1.32.3, < 1.34.6-r0
Update to 1.34.6-r0
c-ares Alpine:v3.22
- Affected ranges
- ECOSYSTEM: ≥ 1.32.3, < 1.34.6-r0
Update to 1.34.6-r0
c-ares Alpine:v3.23
- Affected ranges
- ECOSYSTEM: ≥ 1.32.3, < 1.34.6-r0
Update to 1.34.6-r0
c-ares Alpine:v3.24
- Affected ranges
- ECOSYSTEM: ≥ 1.32.3, < 1.34.6-r0
Update to 1.34.6-r0