Skip to content
OpenAdvisories

Package · Debian

dnspython

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-114605

    dnspython dns.name.from_wire_parser() excessive CPU use

    dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompressio…

    rthalley dnspython dnspython dnspython Debian Ubuntu PyPI
  • High 7.0
    CVE-2023-29483

    Potential DoS via the Tudoor mechanism in eventlet and dnspython

    eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does n…

    eventlet dnspython dnspython dnspython Debian Ubuntu PyPI