Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. This vulnerability is fixed in 1.17.1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade aardvark-dns | Jul 8, 2026 | Jul 7, 2026 |
| Alpine Linux | — | Upgrade aardvark-dns | Jun 18, 2026 | Apr 7, 2026 |
| Redhat_linux | — | Upgrade aardvark-dns-debugsourceUpgrade aardvark-dnsUpgrade aardvark-dns-debuginfoNo solution exists | Jul 9, 2026 | Apr 7, 2026 |
| Rocky_linux | — | Upgrade aardvark-dns-debugsourceUpgrade aardvark-dnsUpgrade aardvark-dns-debuginfo | Jul 10, 2026 | Jul 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub