Skip to content
OpenAdvisories

Package · Debian

dnspython

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2026-114605

    dnspython dns.name.from_wire_parser() excessive CPU use

    dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompressio…

    rthalley dnspython dnspython dnspython Debian Ubuntu PyPI
  • High 7.0
    CVE-2023-29483

    Potential DoS via the Tudoor mechanism in eventlet and dnspython

    eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does n…

    dnspython eventlet dnspython dnspython Debian Ubuntu PyPI
  • Unscored —
    CVE-2008-1447 Public exploit EPSS 95%

    The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Wind…

    bind9 dnsmasq adns libnet-dns-perl Debian