Medium WID-SEC-2025-1036 1 CVE

Red Hat Enterprise Linux (Aardvark-dns): Schwachstelle ermöglicht Denial of Service

Published May 13, 2025 · Updated May 13, 2025 · de-DE

Vendor: Red Hat Product: Enterprise Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 1

High 7.5

CVE-2024-8418

Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Alpine crates.io

Sep 4, 2024

Revision history

2025-05-13 #1
Initiale Fassung

References

Red Hat Security Advisory RHSA-2025:7094 vom 2025-05-13
https://access.redhat.com/errata/RHSA-2025:7094