PT-2024-5912 · Unknown+4 · Aardvark-Dns+4

Published 2024-09-04 · Updated 2025-05-15 · CVE-2024-8418

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Aardvark-dns versions 1.12.0 through 1.12.1

Description A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing out. This issue prevents legitimate users from accessing DNS services, thereby disrupting normal operations and causing service downtime.

Recommendations For versions 1.12.0 and 1.12.1, consider disabling the TCP DNS query processing functionality until a patch is available to prevent exploitation. As a temporary workaround, restrict access to the TCP DNS query endpoint to minimize the risk of exploitation. Avoid using the TCP connection indefinitely in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2025:7094

ALT-PU-2024-12696

ALT-PU-2024-15836

BDU:2024-06718

CVE-2024-8418

GHSA-G5JH-57WM-P79M

INFSA-2025_7094

OPENSUSE-SU-2024:14319-1

RHSA-2025:7094

RHSA-2025_7094

Affected Products

Alt Linux

Aardvark-Dns

Almalinux

Red Hat

Rocky Linux

References · 35

• 🔥 https://github.com/containers/aardvark-dns/issues/500 · Exploit
• https://osv.dev/vulnerability/CVE-2024-8418 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:7094 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-8418 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8418 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-8418 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g5jh-57wm-p79m · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14319-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-8418 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:7094 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-7094.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-8418 · Security Note
• https://bdu.fstec.ru/vul/2024-06718 · Security Note
• https://errata.almalinux.org/9/ALSA-2025-7094.html · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-8418 · Vendor Advisory