Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. This vulnerability is fixed in 1.17.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-35406 Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardv… https://www.cve.org/CVERecord?id=CVE-2026-35406
Post summary
The message announces CVE-2026-35406 in Aardvark‑dns, describing a truncation and connection reset flaw that impacts versions 1.16.0 through 1.17.0.
CVE-2026-35406 Denial of Service via Truncated TCP DNS Query in Aardvark-dns 1.16.0-1.17.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35406
Post summary
The post reports a new denial‑of‑service vulnerability in Aardvark‑dns, detailing the nature of the flaw and affected versions, but provides no PoC, exploit code, active exploitation evidence, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | containers | aardvark-dns | - | - | - |