Latest vulnerabilities for "containers aardvark-dns"

Where

Sort:

Versions

1.12.0

1.12.1

1.16.0

rust/netavarkAardvark-dns has incorrect error handling for malformed tcp packets

Risk 43

Severity

7.5

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact

A truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU.

Patches https://github.com/containers/aardvark-dns/commit/3b49ea7b38bdea134b7f03256f2e13f44ce73bb1

Workarounds None

Credits

Thanks to @dkane01 for reporting this

1 / 2

Source: GitHub

First published (updated )

CVE-2026-35406

containers aardvark-dnsContainers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service

Risk 31

Severity

7.5

EPSS

0.05%

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in Aardvark-dns versions 1.12.0 and 1.12.1. They contain a denial of service vulnerability due to serial processing of TCP DNS queries. This flaw allows a malicious client to keep a TCP connection open indefinitely, causing other DNS queries to time out and resulting in a denial of service for all other containers using aardvark-dns.

1 / 3

Source: GitHub

First published (updated )

CVE-2024-8418

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.