Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
CVE-2025-62408
CVE-2025-62408
c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.
Published Dec 9, 2025
https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5
CVSS Score
Medium
5.9
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
conan
c-ares
1.32.3
conan
c-ares
1.33.0
conan
c-ares
1.33.1
conan
c-ares
1.34.1
conan
c-ares
1.34.3
conan
c-ares
1.34.5
conda
main/c-ares
1.34.5
1-7 of 7
CVE-2025-62408 | Components Impacted | Sonatype Guide | Sonatype Guide
