Asymmetric denial of service In aardvark-dns
Description
Missing connection timeout in Aardvark-dns A flaw was found in Aardvark-dns versions 1.12.0 and 1.12.1. They contain a denial of service vulnerability due to serial processing of TCP DNS queries. This flaw allows a malicious client to keep a TCP connection open indefinitely, causing other DNS queries to time out and resulting in a denial of service for all other containers using aardvark-dns.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | 1.12.2-1 | ||
debian 14 | 1.12.2-1 | ||
 rpm rhel9 | 2:1.14.0-1.el9 | ||
 cargo | 1.12.2 |
Aliases
1. 2. 3. 4. 5. 6. 7. 8.
References
1. 2. 3. 4.