Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-kvkw-we2b-zbdn
Vulnerability ID VCID-kvkw-we2b-zbdn
Aliases CVE-2025-31498
Summary c-ares: c-ares has a use-after-free in read_answers()
Status Published
Exploitability 0.5
Weighted Severity 7.5
Risk 3.8
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
cvssv3 7.0 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-31498.json
epss 0.00618 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.00618 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.00618 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.00618 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.00618 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.00618 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.00618 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.00618 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.00618 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.00618 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.00618 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.0067 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
epss 0.0067 https://api.first.org/data/v1/epss?cve=CVE-2025-31498
cvssv3.1 6.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv4 8.3 https://github.com/c-ares/c-ares/commit/29d38719112639d8c0ba910254a3dd4f482ea2d1
ssvc Track https://github.com/c-ares/c-ares/commit/29d38719112639d8c0ba910254a3dd4f482ea2d1
cvssv4 8.3 https://github.com/c-ares/c-ares/pull/821
ssvc Track https://github.com/c-ares/c-ares/pull/821
cvssv4 8.3 https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
ssvc Track https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-31498.json
https://api.first.org/data/v1/epss?cve=CVE-2025-31498
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2358271 https://bugzilla.redhat.com/show_bug.cgi?id=2358271
29d38719112639d8c0ba910254a3dd4f482ea2d1 https://github.com/c-ares/c-ares/commit/29d38719112639d8c0ba910254a3dd4f482ea2d1
821 https://github.com/c-ares/c-ares/pull/821
GHSA-6hxc-62jh-p29v https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
RHSA-2025:4459 https://access.redhat.com/errata/RHSA-2025:4459
RHSA-2025:4461 https://access.redhat.com/errata/RHSA-2025:4461
RHSA-2025:7426 https://access.redhat.com/errata/RHSA-2025:7426
RHSA-2025:7433 https://access.redhat.com/errata/RHSA-2025:7433
RHSA-2025:7502 https://access.redhat.com/errata/RHSA-2025:7502
RHSA-2025:7537 https://access.redhat.com/errata/RHSA-2025:7537
USN-7477-1 https://usn.ubuntu.com/7477-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-31498.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N Found at https://github.com/c-ares/c-ares/commit/29d38719112639d8c0ba910254a3dd4f482ea2d1
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-08T18:40:21Z/ Found at https://github.com/c-ares/c-ares/commit/29d38719112639d8c0ba910254a3dd4f482ea2d1
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N Found at https://github.com/c-ares/c-ares/pull/821
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-08T18:40:21Z/ Found at https://github.com/c-ares/c-ares/pull/821
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N Found at https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-08T18:40:21Z/ Found at https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
Exploit Prediction Scoring System (EPSS)
Percentile 0.69914
EPSS Score 0.00618
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:41:19.182759+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-31498.json 38.0.0