RHSA-2023:2802: aardvark-dns Red Hat

CVSS: 7.5v3.1HighPublished

Published 21-10-2024Last modified 20-10-2026

Open JSON

Vulnerability summary

RHSA-2023:2802 is a high (CVSS 7.5) vulnerability in aardvark-dns Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 14 · Downstream 0 · Related 1

CVE-2022-1705 CVE-2022-1962 CVE-2022-27664 CVE-2022-28131 CVE-2022-2989 CVE-2022-30630+8 more

Timeline

21-10-2024
PublishedVulnerability first disclosed.
20-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: container-tools:4.0 security and bug fix update

CVSS metrics

1 score · 1 source · 1 version

v3.17.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat67 products

aardvark-dns< 2:1.0.1-37.module+el8.8.0+17954+9046de88
buildah< 1:1.24.6-5.module+el8.8.0+18083+cd85596b
buildah-debuginfo< 1:1.24.6-5.module+el8.8.0+18083+cd85596b
buildah-debugsource< 1:1.24.6-5.module+el8.8.0+18083+cd85596b
buildah-tests< 1:1.24.6-5.module+el8.8.0+18083+cd85596b

buildah-tests-debuginfo< 1:1.24.6-5.module+el8.8.0+18083+cd85596b
cockpit-podman< 0:46-1.module+el8.8.0+17821+de1b53f1
conmon< 2:2.1.4-1.module+el8.8.0+17821+de1b53f1
conmon-debuginfo< 2:2.1.4-1.module+el8.8.0+17821+de1b53f1
conmon-debugsource< 2:2.1.4-1.module+el8.8.0+17821+de1b53f1
container-selinux< 2:2.199.0-1.module+el8.8.0+18113+8b5b6979
containernetworking-plugins< 1:1.1.1-2.module+el8.8.0+17821+de1b53f1
containernetworking-plugins-debuginfo< 1:1.1.1-2.module+el8.8.0+17821+de1b53f1
containernetworking-plugins-debugsource< 1:1.1.1-2.module+el8.8.0+17821+de1b53f1
containers-common< 2:1-37.module+el8.8.0+17954+9046de88
crit< 0:3.15-3.module+el8.8.0+17821+de1b53f1
criu< 0:3.15-3.module+el8.8.0+17821+de1b53f1
criu-debuginfo< 0:3.15-3.module+el8.8.0+17821+de1b53f1
criu-debugsource< 0:3.15-3.module+el8.8.0+17821+de1b53f1
criu-devel< 0:3.15-3.module+el8.8.0+17821+de1b53f1
criu-libs< 0:3.15-3.module+el8.8.0+17821+de1b53f1
criu-libs-debuginfo< 0:3.15-3.module+el8.8.0+17821+de1b53f1
crun< 0:1.6-1.module+el8.8.0+17821+de1b53f1
crun-debuginfo< 0:1.6-1.module+el8.8.0+17821+de1b53f1
crun-debugsource< 0:1.6-1.module+el8.8.0+17821+de1b53f1
fuse-overlayfs< 0:1.9-1.module+el8.8.0+17821+de1b53f1
fuse-overlayfs-debuginfo< 0:1.9-1.module+el8.8.0+17821+de1b53f1
fuse-overlayfs-debugsource< 0:1.9-1.module+el8.8.0+17821+de1b53f1
libslirp< 0:4.4.0-1.module+el8.8.0+17821+de1b53f1
libslirp-debuginfo< 0:4.4.0-1.module+el8.8.0+17821+de1b53f1
libslirp-debugsource< 0:4.4.0-1.module+el8.8.0+17821+de1b53f1
libslirp-devel< 0:4.4.0-1.module+el8.8.0+17821+de1b53f1
netavark< 2:1.0.1-37.module+el8.8.0+17954+9046de88
oci-seccomp-bpf-hook< 0:1.2.5-2.module+el8.8.0+18083+cd85596b
oci-seccomp-bpf-hook-debuginfo< 0:1.2.5-2.module+el8.8.0+18083+cd85596b
oci-seccomp-bpf-hook-debugsource< 0:1.2.5-2.module+el8.8.0+18083+cd85596b
podman< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-catatonit< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-catatonit-debuginfo< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-debuginfo< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-debugsource< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-docker< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-gvproxy< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-gvproxy-debuginfo< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-plugins< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-plugins-debuginfo< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-remote< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-remote-debuginfo< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
podman-tests< 2:4.0.2-20.module+el8.8.0+18201+6ad7332c
python-podman< 0:4.0.0-1.module+el8.8.0+17821+de1b53f1
python3-criu< 0:3.15-3.module+el8.8.0+17821+de1b53f1
python3-podman< 0:4.0.0-1.module+el8.8.0+17821+de1b53f1
runc< 1:1.1.4-1.module+el8.8.0+17821+de1b53f1
runc-debuginfo< 1:1.1.4-1.module+el8.8.0+17821+de1b53f1
runc-debugsource< 1:1.1.4-1.module+el8.8.0+17821+de1b53f1
skopeo< 2:1.6.2-6.module+el8.8.0+17821+de1b53f1
skopeo-debuginfo< 2:1.6.2-6.module+el8.8.0+17821+de1b53f1
skopeo-debugsource< 2:1.6.2-6.module+el8.8.0+17821+de1b53f1
skopeo-tests< 2:1.6.2-6.module+el8.8.0+17821+de1b53f1
slirp4netns< 0:1.1.8-2.module+el8.8.0+17821+de1b53f1
slirp4netns-debuginfo< 0:1.1.8-2.module+el8.8.0+17821+de1b53f1
slirp4netns-debugsource< 0:1.1.8-2.module+el8.8.0+17821+de1b53f1
toolbox< 0:0.0.99.3-7.module+el8.8.0+18115+45021590
toolbox-debuginfo< 0:0.0.99.3-7.module+el8.8.0+18115+45021590
toolbox-debugsource< 0:0.0.99.3-7.module+el8.8.0+18115+45021590
toolbox-tests< 0:0.0.99.3-7.module+el8.8.0+18115+45021590
udica< 0:0.2.6-3.module+el8.8.0+17821+de1b53f1

Show all 67

1 vendor · 67 products

References

87 links

Show all 87 references

bugzilla.redhat.com/show_bug.cgi?id=2107390REPORT
bugzilla.redhat.com/show_bug.cgi?id=2107392REPORT
bugzilla.redhat.com/show_bug.cgi?id=2113814REPORT
bugzilla.redhat.com/show_bug.cgi?id=2115089REPORT
bugzilla.redhat.com/show_bug.cgi?id=2121445REPORT
bugzilla.redhat.com/show_bug.cgi?id=2124669REPORT
bugzilla.redhat.com/show_bug.cgi?id=2129766REPORT
bugzilla.redhat.com/show_bug.cgi?id=2152907REPORT
bugzilla.redhat.com/show_bug.cgi?id=2161274REPORT
bugzilla.redhat.com/show_bug.cgi?id=2165610REPORT
bugzilla.redhat.com/show_bug.cgi?id=2165790REPORT
bugzilla.redhat.com/show_bug.cgi?id=2166906REPORT
bugzilla.redhat.com/show_bug.cgi?id=2168256REPORT
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2802.jsonAdvisory
access.redhat.com/security/cve/CVE-2022-1705REPORT
www.cve.org/CVERecord?id=CVE-2022-1705Advisory
nvd.nist.gov/vuln/detail/CVE-2022-1705Advisory
go.dev/issue/53188ARTICLE
groups.google.com/g/golang-announce/c/nqrv9fbR0zEARTICLE
access.redhat.com/security/cve/CVE-2022-1962REPORT
www.cve.org/CVERecord?id=CVE-2022-1962Advisory
nvd.nist.gov/vuln/detail/CVE-2022-1962Advisory
go.dev/issue/53616ARTICLE
access.redhat.com/security/cve/CVE-2022-2989REPORT
www.cve.org/CVERecord?id=CVE-2022-2989Advisory
nvd.nist.gov/vuln/detail/CVE-2022-2989Advisory
www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/ARTICLE
access.redhat.com/security/cve/CVE-2022-27664REPORT
www.cve.org/CVERecord?id=CVE-2022-27664Advisory
nvd.nist.gov/vuln/detail/CVE-2022-27664Advisory
go.dev/issue/54658ARTICLE
groups.google.com/g/golang-announce/c/x49AQzIVX-s/m/0tgO0pjiBQAJARTICLE
access.redhat.com/security/cve/CVE-2022-28131REPORT
www.cve.org/CVERecord?id=CVE-2022-28131Advisory
nvd.nist.gov/vuln/detail/CVE-2022-28131Advisory
go.dev/issue/53614ARTICLE
access.redhat.com/security/cve/CVE-2022-30630REPORT
www.cve.org/CVERecord?id=CVE-2022-30630Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30630Advisory
go.dev/issue/53415ARTICLE
access.redhat.com/security/cve/CVE-2022-30631REPORT
www.cve.org/CVERecord?id=CVE-2022-30631Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30631Advisory
go.dev/issue/53168ARTICLE
access.redhat.com/security/cve/CVE-2022-30632REPORT
www.cve.org/CVERecord?id=CVE-2022-30632Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30632Advisory
go.dev/issue/53416ARTICLE
access.redhat.com/security/cve/CVE-2022-30633REPORT
www.cve.org/CVERecord?id=CVE-2022-30633Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30633Advisory
go.dev/issue/53611ARTICLE
access.redhat.com/security/cve/CVE-2022-30635REPORT
www.cve.org/CVERecord?id=CVE-2022-30635Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30635Advisory
go.dev/issue/53615ARTICLE
access.redhat.com/security/cve/CVE-2022-32148REPORT
www.cve.org/CVERecord?id=CVE-2022-32148Advisory
nvd.nist.gov/vuln/detail/CVE-2022-32148Advisory
go.dev/issue/53423ARTICLE
access.redhat.com/security/cve/CVE-2022-32189REPORT
www.cve.org/CVERecord?id=CVE-2022-32189Advisory
nvd.nist.gov/vuln/detail/CVE-2022-32189Advisory
go.dev/issue/53871ARTICLE
groups.google.com/g/golang-nuts/c/DCFSyTGM0wUARTICLE
access.redhat.com/security/cve/CVE-2022-41717REPORT
www.cve.org/CVERecord?id=CVE-2022-41717Advisory
nvd.nist.gov/vuln/detail/CVE-2022-41717Advisory
go.dev/cl/455635ARTICLE
go.dev/cl/455717ARTICLE
go.dev/issue/56350ARTICLE
groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJARTICLE
pkg.go.dev/vuln/GO-2022-1144Advisory
access.redhat.com/security/cve/CVE-2023-0778REPORT
www.cve.org/CVERecord?id=CVE-2023-0778Advisory
nvd.nist.gov/vuln/detail/CVE-2023-0778Advisory
github.com/advisories/GHSA-qwqv-rqgf-8qh8Advisory