Medium ELSA-2025-7094 1 CVE

Moderate: aardvark-dns security update (Oracle Linux 9)

Published May 16, 2025 · Updated May 16, 2025

Ecosystem: Oracle Linux

Summary

[2:1.14.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0
- Related: RHEL-60277

[2:1.13.1-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
- Related: RHEL-60277

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	aardvark-dns	2:1.14.0-1.el9

Vulnerabilities 1

High 7.5

CVE-2024-8418

Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Alpine crates.io

Sep 4, 2024