Skip to content
OpenAdvisories

Package · PyPI

trapster

1 known vulnerabilities.

1 result · Feed

  • Medium 5.3

    Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler

    ## Summary `trapster.libs.dns.decode_labels()` decodes DNS names from attacker-supplied UDP packets and recurses **once per RFC 1035 compression pointer** with **no cycle detection and no depth bound**. A single unauthenticated UDP datagram sent to the DNS ho…