# CVE-2025-62408: c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts…

Source: https://junglewise.ai/threats/cve-2025-62408-c-ares-is-an-asynchronous-resolver-library-versions-1-32-3  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-08  
License: CC BY 4.0 with a link back

CVE-2025-62408 · Severity: medium · CVSS 5.9 · Published 2025-12-08

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5  terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.

Technologies: [C-Ares](https://junglewise.ai/threats/technologies/c-ares). Vendors: [C-Ares](https://junglewise.ai/threats/vendors/c-ares).

## Quick answers

**Is CVE-2025-62408 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-62408 being exploited in the wild.

**How severe is CVE-2025-62408?** Medium severity, with a CVSS score of 5.9, published 8 December 2025.

**Which products and versions are affected?** C-Ares. The advisory does not name versions.

**Is there a fix for CVE-2025-62408?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-62408?** Check whether you run C-Ares. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- C-Ares

## Related threats

- [c-ares DNS name parsing ReDoS](https://junglewise.ai/threats/cve-2026-69184-c-ares-is-an-asynchronous-resolver-library-prior-to-1-34-7-ares)
- [c-ares use-after-free / double-free in query-completion handling](https://junglewise.ai/threats/cve-2026-33630-c-ares-use-after-free-double-free-in-query-completion-handling)