Search: CVE-2025-62408

A moderate severity vulnerability (CVE-2025-62408) was found in the c-ares library used by Red Hat products. The flaw allows a Denial of Service (DoS) condition when a DNS query terminates after maximum retry attempts, specifically involving the read_answer() and process_answer() functions. This affects applications relying on asynchronous DNS resolution via c-ares. No mitigation is currently available that meets Red Hat's criteria for ease of use, applicability, and stability. The vulnerability is related to a use-after-free condition (CWE-416) that can cause process crashes.