Containers Aardvark-dns vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Containers Aardvark-dns: 1 record(s), with affected versions and fixes.
cpe:2.3:a:containers:aardvark-dns

CVE-2026-35406 High · 7.5 CWE-835 Apr 7, 2026

Aardvark-dns has incorrect error handling for malformed tcp packets

Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. This vulnerability is fixed in 1.17.1.