diff options
| author | Fernando Apesteguía <fernape@FreeBSD.org> | 2025-12-12 12:57:39 +0000 |
|---|---|---|
| committer | Fernando Apesteguía <fernape@FreeBSD.org> | 2025-12-12 12:57:39 +0000 |
| commit | ae0ba35aae21a9c45068b98619448ae7dca51346 (patch) | |
| tree | 9f5b15929f84bc0e5a2349743f2e689ed8b6f75a | |
| parent | 92b25f40e493e37d2068c6b9700862780f86d1c8 (diff) | |
| -rw-r--r-- | security/vuxml/vuln/2025.xml | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index 767b18947386..4eaa3c0fee29 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,33 @@ + <vuln vid="1adf9ece-d4a3-11f0-83a2-843a4b343614"> + <topic>c-ares -- Use After Free</topic> + <affects> + <package> + <name>c-ares</name> + <range><ge>1.32.3</ge><lt>1.34.6</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5 reports:</p> + <blockquote cite="https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5"> + <p>c-ares is an asynchronous resolver library. Versions + 1.32.3 through 1.34.5 terminate a query after maximum + attempts when using read_answer() and process_answer(), + which can cause a Denial of Service. This issue is fixed in + version 1.34.6.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2025-62408</cvename> + <url>https://cveawg.mitre.org/api/cve/CVE-2025-62408</url> + </references> + <dates> + <discovery>2025-12-08</discovery> + <entry>2025-12-09</entry> + </dates> + </vuln> + <vuln vid="ff25a369-d730-11f0-a15a-a8a1599412c6"> <topic>chromium -- multiple security fixes</topic> <affects> |