Skip to content
OpenAdvisories
Unscored DSA-1619-1 3 CVEs

python-dns - DNS response spoofing

Published Jul 27, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 python-dns 2.3.0-5.2+etch1

Vulnerabilities 3

  • Unscored —
    CVE-2008-1447 Public exploit EPSS 95%

    The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Wind…

  • Unscored —

    PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS r…

  • Unscored —

    PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does no…