CVE-2026-35406
Medium
Description
Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. This vulnerability is fixed in 1.17.1.
SeverityMedium
CVSS6.2
Exploit probability—
ProductContainers Aardvark-dns
PublishedApr 7, 2026
First seenApr 7, 2026
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- containers aardvark-dns1.17.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| containers aardvark-dns | 1.16.0 ≤ v < 1.17.1 | 1.17.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.