RHSA-2023:6939: aardvark-dns Red Hat

CVSS: 9.8v3.1CriticalPublished

Published 21-10-2024Last modified 20-10-2026

Open JSON

Vulnerability summary

RHSA-2023:6939 is a critical (CVSS 9.8) vulnerability in aardvark-dns Red Hat.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 17 · Downstream 0 · Related 5

CVE-2022-3064 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725 CVE-2023-24534 CVE-2023-24536+11 more

Timeline

21-10-2024
PublishedVulnerability first disclosed.
20-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: container-tools:rhel8 security and bug fix update

CVSS metrics

1 score · 1 source · 1 version

v3.19.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat65 products

aardvark-dns< 2:1.7.0-1.module+el8.9.0+19244+655f84ee
buildah< 1:1.31.3-1.module+el8.9.0+19761+326da906
buildah-debuginfo< 1:1.31.3-1.module+el8.9.0+19761+326da906
buildah-debugsource< 1:1.31.3-1.module+el8.9.0+19761+326da906
buildah-tests< 1:1.31.3-1.module+el8.9.0+19761+326da906

buildah-tests-debuginfo< 1:1.31.3-1.module+el8.9.0+19761+326da906
cockpit-podman< 0:75-1.module+el8.9.0+19761+326da906
conmon< 3:2.1.8-1.module+el8.9.0+19761+326da906
conmon-debuginfo< 3:2.1.8-1.module+el8.9.0+19761+326da906
conmon-debugsource< 3:2.1.8-1.module+el8.9.0+19761+326da906
container-selinux< 2:2.221.0-1.module+el8.9.0+19685+019f3589
containernetworking-plugins< 1:1.3.0-4.module+el8.9.0+19649+5879504a
containernetworking-plugins-debuginfo< 1:1.3.0-4.module+el8.9.0+19649+5879504a
containernetworking-plugins-debugsource< 1:1.3.0-4.module+el8.9.0+19649+5879504a
containers-common< 2:1-54.module+el8.9.0+19761+326da906
crit< 0:3.18-4.module+el8.9.0+19090+d2921118
criu< 0:3.18-4.module+el8.9.0+19090+d2921118
criu-debuginfo< 0:3.18-4.module+el8.9.0+19090+d2921118
criu-debugsource< 0:3.18-4.module+el8.9.0+19090+d2921118
criu-devel< 0:3.18-4.module+el8.9.0+19090+d2921118
criu-libs< 0:3.18-4.module+el8.9.0+19090+d2921118
criu-libs-debuginfo< 0:3.18-4.module+el8.9.0+19090+d2921118
crun< 0:1.8.7-1.module+el8.9.0+19731+94cfa27e
crun-debuginfo< 0:1.8.7-1.module+el8.9.0+19731+94cfa27e
crun-debugsource< 0:1.8.7-1.module+el8.9.0+19731+94cfa27e
fuse-overlayfs< 0:1.12-1.module+el8.9.0+19090+d2921118
fuse-overlayfs-debuginfo< 0:1.12-1.module+el8.9.0+19090+d2921118
fuse-overlayfs-debugsource< 0:1.12-1.module+el8.9.0+19090+d2921118
libslirp< 0:4.4.0-1.module+el8.9.0+19244+655f84ee
libslirp-debuginfo< 0:4.4.0-1.module+el8.9.0+19244+655f84ee
libslirp-debugsource< 0:4.4.0-1.module+el8.9.0+19244+655f84ee
libslirp-devel< 0:4.4.0-1.module+el8.9.0+19244+655f84ee
netavark< 2:1.7.0-1.module+el8.9.0+19244+655f84ee
oci-seccomp-bpf-hook< 0:1.2.9-1.module+el8.9.0+19090+d2921118
oci-seccomp-bpf-hook-debuginfo< 0:1.2.9-1.module+el8.9.0+19090+d2921118
oci-seccomp-bpf-hook-debugsource< 0:1.2.9-1.module+el8.9.0+19090+d2921118
podman< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-catatonit< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-catatonit-debuginfo< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-debuginfo< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-debugsource< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-docker< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-gvproxy< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-gvproxy-debuginfo< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-plugins< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-plugins-debuginfo< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-remote< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-remote-debuginfo< 3:4.6.1-4.module+el8.9.0+19761+326da906
podman-tests< 3:4.6.1-4.module+el8.9.0+19761+326da906
python-podman< 0:4.6.0-1.module+el8.9.0+19513+83322573
python3-criu< 0:3.18-4.module+el8.9.0+19090+d2921118
python3-podman< 0:4.6.0-1.module+el8.9.0+19513+83322573
runc< 1:1.1.9-1.module+el8.9.0+19648+0d5ae0ec
runc-debuginfo< 1:1.1.9-1.module+el8.9.0+19648+0d5ae0ec
runc-debugsource< 1:1.1.9-1.module+el8.9.0+19648+0d5ae0ec
skopeo< 2:1.13.3-1.module+el8.9.0+19761+326da906
skopeo-tests< 2:1.13.3-1.module+el8.9.0+19761+326da906
slirp4netns< 0:1.2.1-1.module+el8.9.0+19731+94cfa27e
slirp4netns-debuginfo< 0:1.2.1-1.module+el8.9.0+19731+94cfa27e
slirp4netns-debugsource< 0:1.2.1-1.module+el8.9.0+19731+94cfa27e
toolbox< 0:0.0.99.4-5.module+el8.9.0+19655+b08391f8
toolbox-debuginfo< 0:0.0.99.4-5.module+el8.9.0+19655+b08391f8
toolbox-debugsource< 0:0.0.99.4-5.module+el8.9.0+19655+b08391f8
toolbox-tests< 0:0.0.99.4-5.module+el8.9.0+19655+b08391f8
udica< 0:0.2.6-20.module+el8.9.0+19244+655f84ee

Show all 65

1 vendor · 65 products

References

139 links

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=2175721REPORT
bugzilla.redhat.com/show_bug.cgi?id=2175794REPORT
bugzilla.redhat.com/show_bug.cgi?id=2178358REPORT
bugzilla.redhat.com/show_bug.cgi?id=2178488REPORT
bugzilla.redhat.com/show_bug.cgi?id=2178492REPORT
bugzilla.redhat.com/show_bug.cgi?id=2179449REPORT
bugzilla.redhat.com/show_bug.cgi?id=2179465REPORT
bugzilla.redhat.com/show_bug.cgi?id=2180104REPORT
bugzilla.redhat.com/show_bug.cgi?id=2180118REPORT
bugzilla.redhat.com/show_bug.cgi?id=2181521REPORT
bugzilla.redhat.com/show_bug.cgi?id=2182052REPORT
bugzilla.redhat.com/show_bug.cgi?id=2182883REPORT
bugzilla.redhat.com/show_bug.cgi?id=2182884REPORT
bugzilla.redhat.com/show_bug.cgi?id=2182894REPORT
bugzilla.redhat.com/show_bug.cgi?id=2183041REPORT
bugzilla.redhat.com/show_bug.cgi?id=2183596REPORT
bugzilla.redhat.com/show_bug.cgi?id=2184481REPORT
bugzilla.redhat.com/show_bug.cgi?id=2184482REPORT
bugzilla.redhat.com/show_bug.cgi?id=2184483REPORT
bugzilla.redhat.com/show_bug.cgi?id=2184484REPORT
bugzilla.redhat.com/show_bug.cgi?id=2188524REPORT
bugzilla.redhat.com/show_bug.cgi?id=2189578REPORT
bugzilla.redhat.com/show_bug.cgi?id=2192977REPORT
bugzilla.redhat.com/show_bug.cgi?id=2196026REPORT
bugzilla.redhat.com/show_bug.cgi?id=2196027REPORT
bugzilla.redhat.com/show_bug.cgi?id=2196029REPORT
bugzilla.redhat.com/show_bug.cgi?id=2216700REPORT
bugzilla.redhat.com/show_bug.cgi?id=2218315REPORT
bugzilla.redhat.com/show_bug.cgi?id=2220931REPORT
bugzilla.redhat.com/show_bug.cgi?id=2222167REPORT
bugzilla.redhat.com/show_bug.cgi?id=2228689REPORT
bugzilla.redhat.com/show_bug.cgi?id=2229746REPORT
bugzilla.redhat.com/show_bug.cgi?id=2232127REPORT
bugzilla.redhat.com/show_bug.cgi?id=2233218REPORT
issues.redhat.com/browse/RHEL-3126ARTICLE
issues.redhat.com/browse/RHEL-3149ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6939.jsonAdvisory
access.redhat.com/security/cve/CVE-2022-3064REPORT
www.cve.org/CVERecord?id=CVE-2022-3064Advisory
nvd.nist.gov/vuln/detail/CVE-2022-3064Advisory
github.com/advisories/GHSA-6q6q-88xp-6f2rAdvisory
github.com/go-yaml/yaml/commit/f221b8435cfb71e54062f6c6e99e9ade30b124d5ARTICLE
github.com/go-yaml/yaml/releases/tag/v2.2.4ARTICLE
pkg.go.dev/vuln/GO-2022-0956Advisory
access.redhat.com/security/cve/CVE-2022-41723REPORT
www.cve.org/CVERecord?id=CVE-2022-41723Advisory
nvd.nist.gov/vuln/detail/CVE-2022-41723Advisory
github.com/advisories/GHSA-vvpx-j8f3-3w6hAdvisory
go.dev/cl/468135ARTICLE
go.dev/cl/468295ARTICLE
go.dev/issue/57855ARTICLE
groups.google.com/g/golang-announce/c/V0aBFqaFs_EARTICLE
pkg.go.dev/vuln/GO-2023-1571Advisory
vuln.go.dev/ID/GO-2023-1571.jsonARTICLE
access.redhat.com/security/cve/CVE-2022-41724REPORT
www.cve.org/CVERecord?id=CVE-2022-41724Advisory
nvd.nist.gov/vuln/detail/CVE-2022-41724Advisory
go.dev/cl/468125ARTICLE
go.dev/issue/58001ARTICLE
pkg.go.dev/vuln/GO-2023-1570Advisory
access.redhat.com/security/cve/CVE-2022-41725REPORT
www.cve.org/CVERecord?id=CVE-2022-41725Advisory
nvd.nist.gov/vuln/detail/CVE-2022-41725Advisory
go.dev/cl/468124ARTICLE
go.dev/issue/58006ARTICLE
pkg.go.dev/vuln/GO-2023-1569Advisory
access.redhat.com/security/cve/CVE-2023-3978REPORT
www.cve.org/CVERecord?id=CVE-2023-3978Advisory
nvd.nist.gov/vuln/detail/CVE-2023-3978Advisory
go.dev/cl/514896ARTICLE
go.dev/issue/61615ARTICLE
pkg.go.dev/vuln/GO-2023-1988Advisory
access.redhat.com/security/cve/CVE-2023-24534REPORT
www.cve.org/CVERecord?id=CVE-2023-24534Advisory
nvd.nist.gov/vuln/detail/CVE-2023-24534Advisory
go.dev/issue/58975ARTICLE
groups.google.com/g/golang-announce/c/Xdv6JL9ENs8ARTICLE
access.redhat.com/security/cve/CVE-2023-24536REPORT
www.cve.org/CVERecord?id=CVE-2023-24536Advisory
nvd.nist.gov/vuln/detail/CVE-2023-24536Advisory
go.dev/issue/59153ARTICLE
access.redhat.com/security/cve/CVE-2023-24537REPORT
www.cve.org/CVERecord?id=CVE-2023-24537Advisory
nvd.nist.gov/vuln/detail/CVE-2023-24537Advisory
github.com/golang/go/issues/59180ARTICLE
access.redhat.com/security/cve/CVE-2023-24538REPORT
www.cve.org/CVERecord?id=CVE-2023-24538Advisory
nvd.nist.gov/vuln/detail/CVE-2023-24538Advisory
github.com/golang/go/issues/59234ARTICLE
access.redhat.com/security/cve/CVE-2023-24539REPORT

Showing 100 of 139. Use Open JSON for the complete list.