Most recent entries from all

ALSA-2025:7094 — Moderate: aardvark-dns security update

Affected: AlmaLinux:9: aardvark-dns

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`.

Security Fix(es):

* containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service (CVE-2024-8418)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

bdu:2024-06718

BELL-CVE-2024-8418

Affected: Alpaquita:stream: aardvark-dns

CLEANSTART-2025-BG45728 — flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP D…

Affected: CleanStart: aardvark-dns

Security vulnerability affects the aardvark-dns package. A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries.

EUVD-2026-331219

fkie_cve-2024-8418

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing out. This issue prevents legitimate users from accessing DNS services, thereby disrupting normal operations and causing service downtime.

GHSA-g5jh-57wm-p79m — Missing connection timeout in Aardvark-dns

Affected: crates.io: aardvark-dns

A flaw was found in Aardvark-dns versions 1.12.0 and 1.12.1. They contain a denial of service vulnerability due to serial processing of TCP DNS queries. This flaw allows a malicious client to keep a TCP connection open indefinitely, causing other DNS queries to time out and resulting in a denial of service for all other containers using aardvark-dns.

openSUSE-SU-2024:14319-1 — aardvark-dns-1.12.2-1.1 on GA media

aardvark-dns-1.12.2-1.1 on GA media

Withdrawn: UBUNTU-CVE-2024-8418

Withdrawn by the publisher.

Affected: Ubuntu:24.04:LTS: aardvark-dns

WID-SEC-W-2025-1036 — Red Hat Enterprise Linux (Aardvark-dns): Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.