Resource exhaustion in Containers Aardvark-Dns
CVE-2024-8418
A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing out. This issue prevents legitimate users from accessing DNS services, thereby disrupting normal operations and causing service downtime.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.008 (51.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Containers Aardvark-dns — versions 1.12.0, 1.12.1
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9 — versions 2:1.14.0-1.el9
- Red Hat In-vehicle Operating System 1
- Red Hat Openshift Container Platform 4
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, Third Party Advisory, vdb-entry)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking, Issue Tracking)
- secalert@redhat.com (Exploit, Issue Tracking)
- secalert@redhat.com (Issue Tracking)
Frequently asked questions
- What is CVE-2024-8418?
- CVE-2024-8418 is a high-severity vulnerability in Containers Aardvark-Dns, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2024-09-04.
- How severe is CVE-2024-8418?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2024-8418 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.