PT-2026-31029

CVE-2026-35406

·

Published

2026-04-07

·

Updated

2026-10-01

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Aardvark-dns versions 1.16.0 through 1.17.0
Description A truncated TCP DNS query followed by a connection reset causes Aardvark-dns to enter an unrecoverable infinite error loop, resulting in 100% CPU usage.
Recommendations Update to version 1.17.1 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-400: Uncontrolled Resource Consumption
CWE-835: Loop with Unreachable Exit Condition (\'Infinite Loop\')
Related identifiers
CVE-2026-35406
GHSA-HFPQ-X728-986J
ALSA-2026:36318
ALSA-2026:36782
OPENSUSE-SU-2026:10570-1
RHSA-2026:36318
RHSA-2026:36782
RHSA-2026:56999
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com