CVE-2025-62408

一、漏洞信息 漏洞编号：[CVE-2025-62408](https://nvd.nist.gov/vuln/detail/CVE-2025-62408) 漏洞归属组件：c-ares, https://gitee.com/mindspore/mindspore 漏洞归属的版本：1_19_1 CVSS分值： &emsp;BaseScore： 5.9 Medium &emsp;Vector： CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 漏洞简述： c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. Use after free will lead to crash / Denial of Service. This issue is fixed in version 1.34.6. 漏洞公开时间：2025-12-09 06:15:52 漏洞创建时间：2025-12-09 06:32:55 漏洞详情参考链接： [https://nvd.nist.gov/vuln/detail/CVE-2025-62408](https://nvd.nist.gov/vuln/detail/CVE-2025-62408) 漏洞分析指导链接： [https://gitee.com/mindspore/community/blob/master/security/cve_issue_template.md](https://gitee.com/mindspore/community/blob/master/security/cve_issue_template.md) 漏洞补丁信息： <details> <summary>详情(点击展开)</summary> | 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 | | ------- | -------- | ------- | -------- | --------- | | c-ares/c-ares | | https://github.com/c-ares/c-ares/commit/714bf5675c541bd1e668a8db8e67ce012651e618 | | ljqc | | | | https://github.com/c-ares/c-ares/commit/714bf5675c541bd1e668a8db8e67ce012651e618 | | cvelistv5 | </details> 二、漏洞分析结构反馈 影响性分析说明： 漏洞评分(MindSpore评分): &emsp;BaseScore： 0.0 &emsp;Vector： 受影响版本排查(受影响/不受影响)： 1.master: 2.r2.5: 3.r2.6: 4.r2.7: 5.r2.7.1: 6.r2.7.2: