CVE-2025-48945 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-48945 Interim 1 9 2026-03-05T00:32:29Z current 2025-06-17T23:13:03Z 2026-03-05T00:32:29Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-48945 pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS queries are still pending. This results in a fatal Python error and interpreter crash. The vulnerability has been fixed in pycares 4.9.0 by implementing a safe channel destruction mechanism. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2025-September/022640.html E-Mail link for SUSE-SU-2025:03354-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Package Hub 15 SP6 openSUSE Leap 15.6 openSUSE Tumbleweed python3-pycares-3.1.1-bp156.2.3.1 python311-pycares-4.10.0-150400.9.8.1 python311-pycares-4.9.0-1.1 python312-pycares-4.9.0-1.1 python313-pycares-4.9.0-1.1 python313-pycares-4.9.0-160000.2.2 python311-pycares-4.10.0-150400.9.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS python311-pycares-4.10.0-150400.9.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS python311-pycares-4.10.0-150400.9.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS python311-pycares-4.10.0-150400.9.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS python311-pycares-4.10.0-150400.9.8.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-pycares-4.10.0-150400.9.8.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 python311-pycares-4.10.0-150400.9.8.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS python311-pycares-4.10.0-150400.9.8.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA python311-pycares-4.10.0-150400.9.8.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS python313-pycares-4.9.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python311-pycares-4.10.0-150400.9.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 python311-pycares-4.10.0-150400.9.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 python3-pycares-3.1.1-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 python3-pycares-3.1.1-bp156.2.3.1 as a component of openSUSE Leap 15.6 python311-pycares-4.10.0-150400.9.8.1 as a component of openSUSE Leap 15.6 python311-pycares-4.9.0-1.1 as a component of openSUSE Tumbleweed python312-pycares-4.9.0-1.1 as a component of openSUSE Tumbleweed python313-pycares-4.9.0-1.1 as a component of openSUSE Tumbleweed pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS queries are still pending. This results in a fatal Python error and interpreter crash. The vulnerability has been fixed in pycares 4.9.0 by implementing a safe channel destruction mechanism. CVE-2025-48945 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-pycares-4.10.0-150400.9.8.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-pycares-4.10.0-150400.9.8.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python311-pycares-4.10.0-150400.9.8.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python311-pycares-4.10.0-150400.9.8.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-pycares-4.10.0-150400.9.8.1 SUSE Linux Enterprise Module for Python 3 15 SP7:python311-pycares-4.10.0-150400.9.8.1 SUSE Linux Enterprise Server 15 SP4-LTSS:python311-pycares-4.10.0-150400.9.8.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:python311-pycares-4.10.0-150400.9.8.1 SUSE Linux Enterprise Server 15 SP5-LTSS:python311-pycares-4.10.0-150400.9.8.1 SUSE Linux Enterprise Server 16.0:python313-pycares-4.9.0-160000.2.2 SUSE Linux Enterprise Server for SAP Applications 15 SP4:python311-pycares-4.10.0-150400.9.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:python311-pycares-4.10.0-150400.9.8.1 SUSE Package Hub 15 SP6:python3-pycares-3.1.1-bp156.2.3.1 openSUSE Leap 15.6:python3-pycares-3.1.1-bp156.2.3.1 openSUSE Leap 15.6:python311-pycares-4.10.0-150400.9.8.1 openSUSE Tumbleweed:python311-pycares-4.9.0-1.1 openSUSE Tumbleweed:python312-pycares-4.9.0-1.1 openSUSE Tumbleweed:python313-pycares-4.9.0-1.1 moderate 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H