Skip to content
OpenAdvisories

Weakness (CWE)

CWE-292: DEPRECATED: Trusting Self-reported DNS Name

Variant Deprecated Mapping prohibited

This entry has been deprecated because it was a duplicate of CWE-350. All content has been transferred to CWE-350.

Source: MITRE CWE-292

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.0
    CVE-2023-29483

    Potential DoS via the Tudoor mechanism in eventlet and dnspython

    eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does n…

    dnspython eventlet dnspython dnspython Debian Ubuntu PyPI