CVE-2025-31498

c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue a query either due to a DNS Cookie Failure or when the upstream server does not properly support EDNS, or possibly on TCP queries if the remote closed the connection immediately after a response. If there was an issue trying to put that new transaction on the wire, it would close the connection handle, but read_answers() was still expecting the connection handle to be available to possibly dequeue other responses. In theory a remote attacker might be able to trigger this by flooding the target with ICMP UNREACHABLE packets if they also control the upstream nameserver and can return a result with one of those conditions, this has been untested. Otherwise only a local attacker might be able to change system behavior to make send()/write() return a failure condition. This vulnerability is fixed in 1.34.5.

• CWE-416

• https://github.com/c-ares/c-ares/commit/29d38719112639d8c0ba910254a3dd4f482ea2d1
• https://github.com/c-ares/c-ares/pull/821
• https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
• http://www.openwall.com/lists/oss-security/2025/04/08/3

Published

Apr 8, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-31491AutoGPT is a platform that allows users to create, deploy, a…8.6
• CVE-2025-31492mod_auth_openidc is an OpenID Certified authentication and a…8.2
• CVE-2025-31493Kirby is an open-source content management system. A vulnera…9.1
• CVE-2025-31494AutoGPT is a platform that allows users to create, deploy, a…3.5
• CVE-2025-31496apollo-compiler is a query-based compiler for the GraphQL qu…7.5
• CVE-2025-31497TEIGarage is a webservice and RESTful service to transform, …7.5
• CVE-2025-31499Jellyfin is an open source self hosted media server. Version…8.8
• CVE-2025-3150A vulnerability was found in itning Student Homework Managem…5.3
• CVE-2025-31500Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows…6.1
• CVE-2025-31501Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows…6.1
• CVE-2025-3151A vulnerability was found in SourceCodester Gym Management S…9.8
• CVE-2025-31510In the portal in LemonLDAP::NG before 2.21.0, cross-site scr…7.2