c-ares
Security Risk Profile
34
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 17 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 3, 2016 to present
17
Total CVEs
5
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
34/100
low
Severity Distribution
Critical
2High
3Medium
8Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Use After Free
4
2
Buffer Overflow
2
3
Double Free
1
4
Infoleak
1
Most Affected Products
1. c-ares c-ares41
2. ubuntu/c-ares14
3. Fedoraproject Fedora10
4. Nodejs Node.js10
5. C-ares Project C-ares6
Recent Vulnerabilities
See more →CVE-2025-62408
CVSS 5.9medium
c-ares has a Use After Free vulnerability when connection is cleaned up after error
12/8/2025
REDHAT-BUG-2358271
CVSS 4.0medium
4/8/2025🔧 No Patch
CVE-2025-31498
CVSS 8.3EPSS 0%high
c-ares has a use-after-free in read_answers()
4/8/2025
https://seclists.org/oss-sec/2025/q2/27
unknown
CVE-2025-31498: c-as use-after-fe
4/8/2025🔧 No Patch
https://seclists.org/oss-sec/2024/q1/157
unknown
c-ares CVE-2024-25629
2/23/2024🔧 No Patch
CVE-2024-25629
CVSS 5.5EPSS 0%medium
c-ares out of bounds read in ares__read_line()
2/23/2024
CVE-2020-22217
CVSS 9.8critical
8/22/2023
REDHAT-BUG-2209502
CVSS 7.0high
5/24/2023🔧 No Patch
CVE-2023-31147
CVSS 6.5medium
Insufficient randomness in generation of DNS query IDs in c-ares
5/24/2023
REDHAT-BUG-2209501
CVSS 4.0medium
5/24/2023🔧 No Patch
Monitor c-ares in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.