Approved changes feed: RSS · Atom

cpe:2.3:a:containers:aardvark-dns:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorContainers (c7fe62d8-6191-587d-bfe5-2030ff1846e8)
ProductAardvark Dns (23f9169c-b57c-5384-b938-590db5536c34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/containers/aardvark-dns purl2cpe 2026-06-01 10:11:44.432164

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-35406 vulnerable 2026-06-08 07:59:13.841427 Aardvark-dns has incorrect error handling for malformed tcp packets
MEDIUM (6.2)
Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. This vulnerability is fixed in 1.17.1.
Published: 2026-04-07T21:32:23.512Z
Updated: 2026-04-08T16:14:33.190Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.