container-tools:rhel8/aardvark-dns vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the container-tools:rhel8/aardvark-dns package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
M Directory Traversal	<2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
M Information Exposure	<2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
M CVE-2021-33198	<2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
H Directory Traversal	<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
H Improper Input Validation	<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
H Link Following	<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
H CVE-2024-34158	<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
H CVE-2024-34156	<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
H CVE-2024-34155	<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
M CVE-2024-24791	<2:1.10.0-1.module_el8.10.0+3858+6ad51f9f
M CVE-2024-24788	<2:1.10.0-1.module_el8.10.0+3858+6ad51f9f
H Information Exposure Through Log Files	<2:1.10.0-1.module_el8.10.0+3792+03eaed9c
H CVE-2024-37298	<2:1.10.0-1.module_el8.10.0+3792+03eaed9c
H Improper Validation of Integrity Check Value	<2:1.10.0-1.module_el8.10.0+3792+03eaed9c
H CVE-2024-24789	<2:1.10.0-1.module_el8.10.0+3792+03eaed9c
M CVE-2024-24784	<2:1.10.0-1.module_el8.10.0+3858+6ad51f9f
M CVE-2024-24783	<2:1.10.0-1.module_el8.10.0+3858+6ad51f9f
H Memory Leak	<2:1.10.0-1.module_el8.10.0+3792+03eaed9c
H CVE-2023-45290	<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
M CVE-2024-28176	<2:1.10.0-1.module_el8.10.0+3792+03eaed9c
M CVE-2024-28180	<2:1.10.0-1.module_el8.10.0+3792+03eaed9c
M CVE-2024-24786	<2:1.10.0-1.module_el8.10.0+3858+6ad51f9f
H CVE-2022-41715	<2:1.10.0-1.module_el8.10.0+3792+03eaed9c
H HTTP Request Smuggling	<2:1.10.0-1.module_el8.10.0+3792+03eaed9c
H Link Following	<2:1.10.0-1.module_el8.10.0+3792+03eaed9c
H Exposure of Resource to Wrong Sphere	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Cross-site Scripting (XSS)	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Interpretation Conflict	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Arbitrary Code Injection	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Link Following	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Use of Incorrectly-Resolved Name or Reference	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Improper Preservation of Permissions	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Incorrect Authorization	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M CVE-2023-24540	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Arbitrary Code Injection	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Arbitrary Code Injection	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Integer Overflow or Wraparound	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Allocation of Resources Without Limits or Throttling	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Resource Exhaustion	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Allocation of Resources Without Limits or Throttling	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Resource Exhaustion	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M CVE-2022-41723	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
M Resource Exhaustion	<2:1.7.0-1.module_el8.9.0+3657+d86e192f
L Placement of User into Incorrect Group	<2:1.1.0-5.module_el8.7.0+3344+484dae7b
M Time-of-check Time-of-use (TOCTOU)	<2:1.5.0-2.module_el8.8.0+3470+252b1910
M CVE-2022-32189	<2:1.5.0-2.module_el8.8.0+3470+252b1910
L Placement of User into Incorrect Group	<2:1.1.0-5.module_el8.7.0+3344+484dae7b
M CVE-2022-27664	<2:1.5.0-2.module_el8.8.0+3470+252b1910
M CVE-2022-32148	<2:1.5.0-2.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<2:1.5.0-2.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<2:1.5.0-2.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<2:1.5.0-2.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<2:1.5.0-2.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<2:1.5.0-2.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<2:1.5.0-2.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<2:1.5.0-2.module_el8.8.0+3470+252b1910
M HTTP Request Smuggling	<2:1.5.0-2.module_el8.8.0+3470+252b1910
H Incorrect Default Permissions	<2:1.0.1-27.module_el8.6.0+2878+e681bc44
H Incorrect Default Permissions	<2:1.0.1-27.module_el8.6.0+2878+e681bc44
H Incorrect Default Permissions	<2:1.0.1-27.module_el8.6.0+2878+e681bc44
H Allocation of Resources Without Limits or Throttling	<2:1.0.1-27.module_el8.6.0+2878+e681bc44
H Improper Privilege Management	<2:1.0.1-27.module_el8.6.0+2878+e681bc44
M Allocation of Resources Without Limits or Throttling	<2:1.5.0-2.module_el8.8.0+3470+252b1910
M Use of Insufficiently Random Values	<2:1.5.0-2.module_el8.8.0+3470+252b1910

Vulnerability

Vulnerable Version

Directory Traversal

<2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7

Information Exposure

<2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7

CVE-2021-33198

<2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7

Directory Traversal

<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7

Improper Input Validation

<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7

Link Following

<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7

CVE-2024-34158

<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7

CVE-2024-34156

<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7

CVE-2024-34155

<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7

CVE-2024-24791

<2:1.10.0-1.module_el8.10.0+3858+6ad51f9f

CVE-2024-24788

<2:1.10.0-1.module_el8.10.0+3858+6ad51f9f

Information Exposure Through Log Files

<2:1.10.0-1.module_el8.10.0+3792+03eaed9c

CVE-2024-37298

<2:1.10.0-1.module_el8.10.0+3792+03eaed9c

Improper Validation of Integrity Check Value

<2:1.10.0-1.module_el8.10.0+3792+03eaed9c

CVE-2024-24789

<2:1.10.0-1.module_el8.10.0+3792+03eaed9c

CVE-2024-24784

<2:1.10.0-1.module_el8.10.0+3858+6ad51f9f

CVE-2024-24783

<2:1.10.0-1.module_el8.10.0+3858+6ad51f9f

Memory Leak

<2:1.10.0-1.module_el8.10.0+3792+03eaed9c

CVE-2023-45290

<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7

CVE-2024-28176

<2:1.10.0-1.module_el8.10.0+3792+03eaed9c

CVE-2024-28180

<2:1.10.0-1.module_el8.10.0+3792+03eaed9c

CVE-2024-24786

<2:1.10.0-1.module_el8.10.0+3858+6ad51f9f

CVE-2022-41715

<2:1.10.0-1.module_el8.10.0+3792+03eaed9c

HTTP Request Smuggling

<2:1.10.0-1.module_el8.10.0+3792+03eaed9c

Link Following

<2:1.10.0-1.module_el8.10.0+3792+03eaed9c

Exposure of Resource to Wrong Sphere