CVE-2026-35406 Aardvark-dns has incorrect error handling for malformed tcp packets

Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. This vulnerability is fixed in 1.17.1...

CVE-2026-35406

Affected software: aardvark-dns (authoritative DNS server for A/AAAA container records). Vulnerable versions: 1.16.0 through 1.17.0. Root cause: a truncated TCP DNS query followed by a connection reset can cause the process to enter an unrecoverable infinite error loop, consuming 100% CPU. Impact...

netavark has incorrect error handling for malformed tcp packets

Impact A truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. Patches https://github.com/containers/aardvark-dns/commit/3b49ea7b38bdea134b7f03256f2e13f44ce73bb1 Workarounds None Credits Thanks to @dkane01 for reporti...

CVE-2009-4921

Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allow remote attackers to cause a denial of service traceback via malformed TCP packets, aka Bug ID CSCsm84110...

CVE-2021-31889

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions, SIMOTICS CONNECT 400 All versions V0.5.0.0. Malformed TCP packets with a corrupted SACK option leads to Information Lea...

EUVD-2000-0452

Malware in sbrugna...

EUVD-2015-0604

Malware in sbrugna...

EUVD-2013-1282

Malware in sbrugna...

EUVD-2002-0505

Malware in sbrugna...

EUVD-2006-4239

Malware in sbrugna...

EUVD-2002-1187

Malware in sbrugna...

EUVD-2006-0545

Malware in sbrugna...

EUVD-2010-0597

Malware in sbrugna...

EUVD-2009-4884

Malware in sbrugna...

EUVD-2013-5310

Malware in sbrugna...

EUVD-2022-32781

Malicious code in bioql PyPI...

EUVD-2022-30282

Malicious code in bioql PyPI...

EUVD-2022-26000

Malicious code in bioql PyPI...

CVE-2022-28329

A vulnerability has been identified in SCALANCE W1788-1 M12 All versions V3.0.0, SCALANCE W1788-2 EEC M12 All versions V3.0.0, SCALANCE W1788-2 M12 All versions V3.0.0, SCALANCE W1788-2IA M12 All versions V3.0.0. Affected devices do not properly handle malformed TCP packets received over the...

CVE-2013-1242

Memory leak in the web framework in the server in Cisco Unified Presence CUP allows remote attackers to cause a denial of service memory consumption via malformed TCP packets, aka Bug ID CSCug38080...