7.5

CVE-2024-8418: containers aardvark-dns Uncontrolled Resource Consumption

CVSS: 7.5v3.1HighModified
AliasesRHSA-2025:7094UBUNTU-CVE-2024-8418DEBIAN-CVE-2024-8418
Published 04-09-2024Last modified 29-06-2026
Open JSON

Vulnerability summary

CVE-2024-8418 is a high (CVSS 7.5) Uncontrolled Resource Consumption vulnerability in containers aardvark-dns. EPSS estimates a 0.77% chance of exploitation in the next 30 days, higher than 54.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
40/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
0.77%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github

Timeline

  1. 04-09-2024
    PublishedVulnerability first disclosed.
  2. 29-06-2026
    Last modifiedVulnerability information updated.

Description

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing out. This issue prevents legitimate users from accessing DNS services, thereby disrupting normal operations and causing service downtime.

CVSS metrics

7 scores · 6 sources · 2 versions

EPSS trend

Probability

0.77%

Chance of exploitation in the next 30 days

Percentile

55%

Versus all other CVEs

30-day change

0.00 pp

From 0.77% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.77%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • githubUnverified

    Aardvark Dns

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Redhat3 products
  • aardvark-dns< 2:1.14.0-1.el9
  • aardvark-dns-debuginfo< 2:1.14.0-1.el9
  • aardvark-dns-debugsource< 2:1.14.0-1.el9
Containers1 product
Crates.Io1 product
  • aardvark-dns≥ 1.12.0, < 1.12.2
Debian1 product
  • aardvark-dns< 1.12.2-1
Opensuse1 product
  • aardvark-dns&distro=openSUSE Tumbleweed< 1.12.2-1.1
Ubuntu1 product
  • aardvark-dnsAll versions (No fix recorded)

6 vendors · 8 products

References

19 links
Show all 19 references