CVE-2024-8418: Missing connection timeout in Aardvark-dns
(updated )
A flaw was found in Aardvark-dns versions 1.12.0 and 1.12.1. They contain a denial of service vulnerability due to serial processing of TCP DNS queries. This flaw allows a malicious client to keep a TCP connection open indefinitely, causing other DNS queries to time out and resulting in a denial of service for all other containers using aardvark-dns.
References
- access.redhat.com/errata/RHSA-2025:7094
- access.redhat.com/security/cve/CVE-2024-8418
- bugzilla.redhat.com/show_bug.cgi?id=2309683
- github.com/advisories/GHSA-g5jh-57wm-p79m
- github.com/containers/aardvark-dns
- github.com/containers/aardvark-dns/commit/aa109bbd6743abd7027e589cc4b871dd2dce7d50
- github.com/containers/aardvark-dns/issues/500
- github.com/containers/aardvark-dns/pull/503
- nvd.nist.gov/vuln/detail/CVE-2024-8418
Code Behaviors & Features
Detect and mitigate CVE-2024-8418 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →