Aardvark-dns vulnerabilities
2 known vulnerabilities in Aardvark-dns from Containers. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
aardvark-dns: Loop with Unreachable Exit Condition
Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. This vulnerability is fixed
- 7.5 High severity
Red Hat Enterprise Linux 9: Uncontrolled Resource Consumption
A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and