Skip to content
OpenAdvisories
Medium DSA-6084-1 1 CVE

c-ares - security update

Published Dec 18, 2025 · Updated Dec 18, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 13 c-ares 1.34.5-1+deb13u1

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-62408

    c-ares has a Use After Free vulnerability when connection is cleaned up after error

    c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.

    c-ares c-ares fluent-bit c-ares Debian Ubuntu Azure Linux Alpine