RHSA-2024:5258: aardvark-dns Red Hat

Published

Published 21-10-2024Last modified 16-10-2026

Vulnerability summary

RHSA-2024:5258 is a high (CVSS 8.3) vulnerability in aardvark-dns Red Hat.

Overall risk

33/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.3/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 9 · Downstream 0 · Related 3

CVE-2023-45290 CVE-2024-1394 CVE-2024-24783 CVE-2024-24784 CVE-2024-24789 CVE-2024-3727+3 more

Timeline

21-10-2024
PublishedVulnerability first disclosed.
16-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: container-tools:rhel8 security update

CVSS metrics

1 score · 1 source · 1 version

v3.18.3

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat65 products

aardvark-dns< 2:1.10.0-1.module+el8.10.0+22202+761b9a65
buildah< 2:1.33.8-4.module+el8.10.0+22202+761b9a65
buildah-debuginfo< 2:1.33.8-4.module+el8.10.0+22202+761b9a65
buildah-debugsource< 2:1.33.8-4.module+el8.10.0+22202+761b9a65
buildah-tests< 2:1.33.8-4.module+el8.10.0+22202+761b9a65

buildah-tests-debuginfo< 2:1.33.8-4.module+el8.10.0+22202+761b9a65
cockpit-podman< 0:84.1-1.module+el8.10.0+22202+761b9a65
conmon< 3:2.1.10-1.module+el8.10.0+22202+761b9a65
conmon-debuginfo< 3:2.1.10-1.module+el8.10.0+22202+761b9a65
conmon-debugsource< 3:2.1.10-1.module+el8.10.0+22202+761b9a65
container-selinux< 2:2.229.0-2.module+el8.10.0+22202+761b9a65
containernetworking-plugins< 1:1.4.0-5.module+el8.10.0+22202+761b9a65
containernetworking-plugins-debuginfo< 1:1.4.0-5.module+el8.10.0+22202+761b9a65
containernetworking-plugins-debugsource< 1:1.4.0-5.module+el8.10.0+22202+761b9a65
containers-common< 2:1-82.module+el8.10.0+22202+761b9a65
crit< 0:3.18-5.module+el8.10.0+22202+761b9a65
criu< 0:3.18-5.module+el8.10.0+22202+761b9a65
criu-debuginfo< 0:3.18-5.module+el8.10.0+22202+761b9a65
criu-debugsource< 0:3.18-5.module+el8.10.0+22202+761b9a65
criu-devel< 0:3.18-5.module+el8.10.0+22202+761b9a65
criu-libs< 0:3.18-5.module+el8.10.0+22202+761b9a65
criu-libs-debuginfo< 0:3.18-5.module+el8.10.0+22202+761b9a65
crun< 0:1.14.3-2.module+el8.10.0+22202+761b9a65
crun-debuginfo< 0:1.14.3-2.module+el8.10.0+22202+761b9a65
crun-debugsource< 0:1.14.3-2.module+el8.10.0+22202+761b9a65
fuse-overlayfs< 0:1.13-1.module+el8.10.0+22202+761b9a65
fuse-overlayfs-debuginfo< 0:1.13-1.module+el8.10.0+22202+761b9a65
fuse-overlayfs-debugsource< 0:1.13-1.module+el8.10.0+22202+761b9a65
libslirp< 0:4.4.0-2.module+el8.10.0+22202+761b9a65
libslirp-debuginfo< 0:4.4.0-2.module+el8.10.0+22202+761b9a65
libslirp-debugsource< 0:4.4.0-2.module+el8.10.0+22202+761b9a65
libslirp-devel< 0:4.4.0-2.module+el8.10.0+22202+761b9a65
netavark< 2:1.10.3-1.module+el8.10.0+22202+761b9a65
oci-seccomp-bpf-hook< 0:1.2.10-1.module+el8.10.0+22202+761b9a65
oci-seccomp-bpf-hook-debuginfo< 0:1.2.10-1.module+el8.10.0+22202+761b9a65
oci-seccomp-bpf-hook-debugsource< 0:1.2.10-1.module+el8.10.0+22202+761b9a65
podman< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-catatonit< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-catatonit-debuginfo< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-debuginfo< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-debugsource< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-docker< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-gvproxy< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-gvproxy-debuginfo< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-plugins< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-plugins-debuginfo< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-remote< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-remote-debuginfo< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
podman-tests< 4:4.9.4-12.module+el8.10.0+22202+761b9a65
python-podman< 0:4.9.0-2.module+el8.10.0+22202+761b9a65
python3-criu< 0:3.18-5.module+el8.10.0+22202+761b9a65
python3-podman< 0:4.9.0-2.module+el8.10.0+22202+761b9a65
runc< 1:1.1.12-4.module+el8.10.0+22202+761b9a65
runc-debuginfo< 1:1.1.12-4.module+el8.10.0+22202+761b9a65
runc-debugsource< 1:1.1.12-4.module+el8.10.0+22202+761b9a65
skopeo< 2:1.14.5-3.module+el8.10.0+22202+761b9a65
skopeo-tests< 2:1.14.5-3.module+el8.10.0+22202+761b9a65
slirp4netns< 0:1.2.3-1.module+el8.10.0+22202+761b9a65
slirp4netns-debuginfo< 0:1.2.3-1.module+el8.10.0+22202+761b9a65
slirp4netns-debugsource< 0:1.2.3-1.module+el8.10.0+22202+761b9a65
toolbox< 0:0.0.99.5-2.module+el8.10.0+22202+761b9a65
toolbox-debuginfo< 0:0.0.99.5-2.module+el8.10.0+22202+761b9a65
toolbox-debugsource< 0:0.0.99.5-2.module+el8.10.0+22202+761b9a65
toolbox-tests< 0:0.0.99.5-2.module+el8.10.0+22202+761b9a65
udica< 0:0.2.6-21.module+el8.10.0+22202+761b9a65

Show all 65

1 vendor · 65 products

References

60 links

Show all 60 references

issues.redhat.com/browse/RHEL-40800ARTICLE
issues.redhat.com/browse/RHEL-40801ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5258.jsonAdvisory
access.redhat.com/security/cve/CVE-2023-45290REPORT
www.cve.org/CVERecord?id=CVE-2023-45290Advisory
nvd.nist.gov/vuln/detail/CVE-2023-45290Advisory
www.openwall.com/lists/oss-security/2024/03/08/4ARTICLE
go.dev/cl/569341ARTICLE
go.dev/issue/65383ARTICLE
groups.google.com/g/golang-announce/c/5pwGVUPoMbgARTICLE
pkg.go.dev/vuln/GO-2024-2599Advisory
security.netapp.com/advisory/ntap-20240329-0004ARTICLE
access.redhat.com/security/cve/CVE-2024-1394REPORT
www.cve.org/CVERecord?id=CVE-2024-1394Advisory
nvd.nist.gov/vuln/detail/CVE-2024-1394Advisory
github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136ARTICLE
github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6ARTICLE
github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259fARTICLE
pkg.go.dev/vuln/GO-2024-2660Advisory
vuln.go.dev/ID/GO-2024-2660.jsonARTICLE
access.redhat.com/security/cve/CVE-2024-3727REPORT
www.cve.org/CVERecord?id=CVE-2024-3727Advisory
nvd.nist.gov/vuln/detail/CVE-2024-3727Advisory
access.redhat.com/security/cve/CVE-2024-6104REPORT
www.cve.org/CVERecord?id=CVE-2024-6104Advisory
nvd.nist.gov/vuln/detail/CVE-2024-6104Advisory
access.redhat.com/security/cve/CVE-2024-24783REPORT
www.cve.org/CVERecord?id=CVE-2024-24783Advisory
nvd.nist.gov/vuln/detail/CVE-2024-24783Advisory
github.com/advisories/GHSA-3q2c-pvp5-3cqpAdvisory
go.dev/cl/569339ARTICLE
go.dev/issue/65390ARTICLE
pkg.go.dev/vuln/GO-2024-2598Advisory
security.netapp.com/advisory/ntap-20240329-0005ARTICLE
access.redhat.com/security/cve/CVE-2024-24784REPORT
www.cve.org/CVERecord?id=CVE-2024-24784Advisory
nvd.nist.gov/vuln/detail/CVE-2024-24784Advisory
access.redhat.com/security/cve/CVE-2024-24789REPORT
www.cve.org/CVERecord?id=CVE-2024-24789Advisory
nvd.nist.gov/vuln/detail/CVE-2024-24789Advisory
access.redhat.com/security/cve/CVE-2024-37298REPORT
www.cve.org/CVERecord?id=CVE-2024-37298Advisory
nvd.nist.gov/vuln/detail/CVE-2024-37298Advisory
github.com/gorilla/schema/blob/main/decoder.goARTICLE
github.com/gorilla/schema/commit/cd59f2f12cbdfa9c06aa63e425d1fe4a806967ffARTICLE
github.com/gorilla/schema/security/advisories/GHSA-3669-72x9-r9p3ARTICLE
access.redhat.com/security/cve/CVE-2024-37891REPORT
bugzilla.redhat.com/show_bug.cgi?id=2292788REPORT
www.cve.org/CVERecord?id=CVE-2024-37891Advisory
nvd.nist.gov/vuln/detail/CVE-2024-37891Advisory