CVE-2025-62408

A flaw was found in c-ares. This vulnerability allows a Denial of Service (DoS) via terminating a query after maximum attempts when using read_answer() and process_answer() functions.

This vulnerability is rated Moderate for Red Hat products. The flaw in c-ares can lead to a Denial of Service when the library is used to resolve queries, specifically when read_answer() and process_answer() functions are called and a query terminates after maximum attempts. This could impact applications that rely on c-ares for asynchronous DNS resolution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.