Most recent entries from all

ALSA-2026:36318 — Moderate: aardvark-dns security update

Affected: AlmaLinux:9: aardvark-dns

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`.

Security Fix(es):

* aardvark-dns: Aardvark-dns: Denial of Service via truncated TCP DNS query and connection reset (CVE-2026-35406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2026-35406

Affected: Alpaquita:25: aardvark-dns, Alpaquita:stream: aardvark-dns

EUVD-2026-281280

fkie_cve-2026-35406

Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. This vulnerability is fixed in 1.17.1.

GHSA-hfpq-x728-986j — netavark has incorrect error handling for malformed tcp packets

Affected: crates.io: netavark

### Impact

A truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU.

### Patches https://github.com/containers/aardvark-dns/commit/3b49ea7b38bdea134b7f03256f2e13f44ce73bb1

### Workarounds None

### Credits

Thanks to @dkane01 for reporting this

openSUSE-SU-2026:10570-1 — aardvark-dns-1.17.1-1.1 on GA media

aardvark-dns-1.17.1-1.1 on GA media

RHSA-2026:56999 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

aardvark-dns: Aardvark-dns: Denial of Service via truncated TCP DNS query and connection reset rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List

RLSA-2026:36318 — Moderate: aardvark-dns security update

Affected: Rocky Linux:9: aardvark-dns

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`.

Security Fix(es):

* aardvark-dns: Aardvark-dns: Denial of Service via truncated TCP DNS query and connection reset (CVE-2026-35406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2026-35406

Affected: Ubuntu:24.04:LTS: aardvark-dns, Ubuntu:25.10: aardvark-dns, Ubuntu:26.04:LTS: aardvark-dns

WID-SEC-W-2026-2247 — Red Hat Enterprise Linux (libsolv, aardvark-dns): Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.