https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:52:20.281620+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:36318 ALSA-2026:36318 — Moderate: aardvark-dns security update 2026-10-02T23:52:20.289278+00:00

Affected: AlmaLinux:9: aardvark-dns

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`.

Security Fix(es):

* aardvark-dns: Aardvark-dns: Denial of Service via truncated TCP DNS query and connection reset (CVE-2026-35406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2026-35406 BELL-CVE-2026-35406 2026-10-02T23:52:20.289330+00:00

Affected: Alpaquita:25: aardvark-dns, Alpaquita:stream: aardvark-dns

 https://cve.radiocsirt.org/vuln/euvd-2026-281280 EUVD-2026-281280 2026-10-02T23:52:20.289353+00:00 EUVD-2026-281280 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35406 fkie_cve-2026-35406 2026-10-02T23:52:20.289365+00:00

Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. This vulnerability is fixed in 1.17.1.

 https://cve.radiocsirt.org/vuln/ghsa-hfpq-x728-986j GHSA-hfpq-x728-986j — netavark has incorrect error handling for malformed tcp packets 2026-10-02T23:52:20.289386+00:00

Affected: crates.io: netavark

### Impact

A truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU.

### Patches https://github.com/containers/aardvark-dns/commit/3b49ea7b38bdea134b7f03256f2e13f44ce73bb1

### Workarounds None

### Credits

Thanks to @dkane01 for reporting this

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10570-1 openSUSE-SU-2026:10570-1 — aardvark-dns-1.17.1-1.1 on GA media 2026-10-02T23:52:20.289408+00:00

aardvark-dns-1.17.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:56999 RHSA-2026:56999 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T23:52:20.289424+00:00

aardvark-dns: Aardvark-dns: Denial of Service via truncated TCP DNS query and connection reset rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List

 https://cve.radiocsirt.org/vuln/rlsa-2026:36318 RLSA-2026:36318 — Moderate: aardvark-dns security update 2026-10-02T23:52:20.289440+00:00

Affected: Rocky Linux:9: aardvark-dns

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`.

Security Fix(es):

* aardvark-dns: Aardvark-dns: Denial of Service via truncated TCP DNS query and connection reset (CVE-2026-35406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35406 UBUNTU-CVE-2026-35406 2026-10-02T23:52:20.289460+00:00

Affected: Ubuntu:24.04:LTS: aardvark-dns, Ubuntu:25.10: aardvark-dns, Ubuntu:26.04:LTS: aardvark-dns

Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. This vulnerability is fixed in 1.17.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2247 WID-SEC-W-2026-2247 — Red Hat Enterprise Linux (libsolv, aardvark-dns): Mehrere Schwachstellen 2026-10-02T23:52:20.289480+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.