CVE-2024-8418
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing out.
Risk Assessment
The risk is that an attacker can effectively block access to DNS services, causing downtime and preventing legitimate users from accessing network services.
Recommendation
It is recommended to immediately update Aardvark-dns to the latest patched version and consider limiting TCP connection duration in the server configuration.
Other vulnerabilities in Aardvark-dns
Original NVD description (English source)
A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing out. This issue prevents legitimate users from accessing DNS services, thereby disrupting normal operations and causing service downtime.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS