Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-7094

Опубликовано: 16 мая 2025
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2025-7094: aardvark-dns security update (MODERATE)

[2:1.14.0-1]

[2:1.13.1-1]

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

aardvark-dns

1.14.0-1.el9

Oracle Linux x86_64

aardvark-dns

1.14.0-1.el9

Связанные CVE

Связанные уязвимости

CVSS3: 7.5
ubuntu
11 месяцев назад

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing out. This issue prevents legitimate users from accessing DNS services, thereby disrupting normal operations and causing service downtime.

CVSS3: 7.5
redhat
11 месяцев назад

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing out. This issue prevents legitimate users from accessing DNS services, thereby disrupting normal operations and causing service downtime.

CVSS3: 7.5
nvd
11 месяцев назад

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing out. This issue prevents legitimate users from accessing DNS services, thereby disrupting normal operations and causing service downtime.

CVSS3: 7.5
debian
11 месяцев назад

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of S ...

CVSS3: 7.5
github
11 месяцев назад

Missing connection timeout in Aardvark-dns