aardvark-dns-1.14.0-1.el9
エラータID: AXSA:2025-10147:01
リリース日:
2025/06/28 Saturday - 01:47
題名:
aardvark-dns-1.14.0-1.el9
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- Aardvark-dns には、TCP 接続による DNS クエリのシリアル化処理に
問題があるため、リモートの攻撃者により、TCP 接続を継続して開いた
状態にすることを介して、サービス拒否攻撃を可能とする脆弱性が存在
します。(CVE-2024-8418)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2024-8418
A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing out. This issue prevents legitimate users from accessing DNS services, thereby disrupting normal operations and causing service downtime.
A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing out. This issue prevents legitimate users from accessing DNS services, thereby disrupting normal operations and causing service downtime.
追加情報:
N/A
ダウンロード:
SRPMS
- aardvark-dns-1.14.0-1.el9.src.rpm
MD5: 4f3fe08a5fef1f39189358b5660cac57
SHA-256: 68a4dc04873be11e29ae797db69640c6b52f952aa9062989d3b681422576cc6c
Size: 7.22 MB
Asianux Server 9 for x86_64
- aardvark-dns-1.14.0-1.el9.x86_64.rpm
MD5: 3b134bc0c349a551cb419d5779a64b1c
SHA-256: 32390e0076e69de57eac2b5ffb0d7b0565a165b46e5ab4500e534d733d1923a4
Size: 878.61 kB
English