Skip to content
OpenAdvisories

Package · PyPI

trapster

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    GHSA-mxwc-wh95-pw4g

    Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler

    ## Summary `trapster.libs.dns.decode_labels()` decodes DNS names from attacker-supplied UDP packets and recurses **once per RFC 1035 compression pointer** with **no cycle detection and no depth bound**. A single unauthenticated UDP datagram sent to the DNS ho…

    trapster PyPI