Skip to content
OpenAdvisories
High · 7.0 CVE-2023-29483 EUVD-2024-1084GHSA-3rq5-2g8h-59hcPYSEC-2026-1307PYSEC-2026-2472

Potential DoS via the Tudoor mechanism in eventlet and dnspython

Published Apr 11, 2024 · Updated Nov 4, 2025 · Assigned by mitre

Description

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 dnspython 2.6.0-1 —
Debian 13 dnspython 2.6.0-1 —
Debian 12 dnspython No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS dnspython No fix yet —
Ubuntu 20.04 LTS dnspython No fix yet —
Ubuntu 18.04 LTS dnspython No fix yet —
Ubuntu 16.04 LTS dnspython No fix yet —
Ubuntu 14.04 LTS dnspython No fix yet —
ReleasePackageFixed inAdvisory
RHEL 9 python-dns +1 2.6.1-3.el9 RHSA-2024:9423
RHEL 8 python-dns +1 1.15.0-12.el8_10 RHSA-2024:3275
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Openshift Ironic 4 python-eventlet +1 0.33.1-6.el9 RHSA-2024:0045
Red Hat OpenShift 4 butane +1 0.21.0-1.rhaos4.16.el8 RHSA-2024:0045
Red Hat OpenShift 4 cri-o 1.29.5-5.rhaos4.16.git7032128.el8 RHSA-2024:0045
Red Hat OpenShift 4 cri-tools 1.29.0-3.1.el8 RHSA-2024:0045
Red Hat OpenShift 4 ignition +1 2.18.0-2.1.rhaos4.16.el9 RHSA-2024:0045
Red Hat OpenShift 4 openshift +5 4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 openshift-prometheus-promu +1 0.15.0-15.2.gitd5383c5.el9 RHSA-2024:0045
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.16.0-202405311136.p0.ga53e9de.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.16.0-202404301345.p0.g0e95532.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.16.0-202404181812.p0.g26b43df.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 podman +6 4:4.9.4-5.1.rhaos4.16.el8 RHSA-2024:0045
Red Hat OpenShift 4 runc 4:1.1.12-3.1.rhaos4.16.el8 RHSA-2024:0045
Red Hat OpenShift 4 skopeo +1 2:1.14.4-1.rhaos4.16.el8 RHSA-2024:0045

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 python3-dns 2.6.1-3.el9 ALSA-2024:9423
AlmaLinux 8 python3-dns 1.15.0-12.el8_10 ALSA-2024:3275

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 python-dns 2.6.1-3.el9 RLSA-2024:9423
Rocky Linux 8 python-dns 1.15.0-12.el8_10 RLSA-2024:3275
ReleasePackageFixed inAdvisory
SLES 15 SP7 python-google-api-core 2.28.0-150400.5.9.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-artifact-registry 1.19.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-audit-log 0.4.0-150400.9.8.1 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-build 3.35.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-compute 1.42.0-150400.9.11.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-core 2.5.0-150400.5.9.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-dns 0.36.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-domains 1.12.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-iam 2.21.0-150400.9.11.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-kms 3.9.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-kms-inventory 0.4.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-logging 3.13.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-run 0.14.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-secret-manager 2.26.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-service-directory 1.16.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-spanner 3.58.0-150400.9.8.1 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-storage 3.8.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-cloud-vpc-access 1.15.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-crc32c +1 1.8.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-google-resumable-media 2.8.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-googleapis-common-protos 1.72.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-grpc-google-iam-v1 0.14.3-150400.9.6.2 SUSE-RU-2026:2816-1
SLES 15 SP7 python-grpcio 1.60.1-150600.16.10.1 SUSE-RU-2026:2816-1
SLES 15 SP7 python-proto-plus 1.26.1-150400.9.6.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-dnspython 1.15.0-150000.3.5.1 SUSE-SU-2024:3298-1, SUSE-SU-2024:2655-1
SLES 15 SP6 python-google-api-core 2.28.0-150400.5.9.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-auth 2.47.0-150400.6.12.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-artifact-registry 1.19.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-audit-log 0.4.0-150400.9.8.1 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-build 3.35.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-compute 1.42.0-150400.9.11.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-core 2.5.0-150400.5.9.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-dns 0.36.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-domains 1.12.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-iam 2.21.0-150400.9.11.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-kms 3.9.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-kms-inventory 0.4.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-logging 3.13.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-run 0.14.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-secret-manager 2.26.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-service-directory 1.16.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-spanner 3.58.0-150400.9.8.1 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-storage 3.8.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-cloud-vpc-access 1.15.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-crc32c +1 1.8.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-google-resumable-media 2.8.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-googleapis-common-protos 1.72.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-grpc-google-iam-v1 0.14.3-150400.9.6.2 SUSE-RU-2026:2816-1
SLES 15 SP6 python-grpc-interceptor 0.15.4-150400.9.4.1 SUSE-RU-2026:2816-1
SLES 15 SP6 python-grpcio 1.60.1-150600.16.10.1 SUSE-RU-2026:2816-1
SLES 15 SP6 python-proto-plus 1.26.1-150400.9.6.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-dnspython 1.15.0-150000.3.5.1 SUSE-SU-2024:3298-1, SUSE-SU-2024:2655-1
SLES 15 SP5 python-google-api-core 2.28.0-150400.5.9.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-auth 2.47.0-150400.6.12.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-artifact-registry 1.19.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-audit-log 0.4.0-150400.9.8.1 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-build 3.35.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-compute 1.42.0-150400.9.11.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-core 2.5.0-150400.5.9.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-dns 0.36.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-domains 1.12.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-iam 2.21.0-150400.9.11.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-kms 3.9.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-kms-inventory 0.4.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-logging 3.13.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-run 0.14.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-secret-manager 2.26.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-service-directory 1.16.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-spanner 3.58.0-150400.9.8.1 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-storage 3.8.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-cloud-vpc-access 1.15.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-crc32c +1 1.8.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-google-resumable-media 2.8.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-googleapis-common-protos 1.72.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-grpc-google-iam-v1 0.14.3-150400.9.6.2 SUSE-RU-2026:2816-1
SLES 15 SP5 python-grpc-interceptor 0.15.4-150400.9.4.1 SUSE-RU-2026:2816-1
SLES 15 SP5 python-proto-plus 1.26.1-150400.9.6.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
SLES 15 SP4 python-google-api-core 2.28.0-150400.5.9.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-auth 2.47.0-150400.6.12.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-artifact-registry 1.19.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-audit-log 0.4.0-150400.9.8.1 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-build 3.35.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-compute 1.42.0-150400.9.11.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-core 2.5.0-150400.5.9.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-dns 0.36.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-domains 1.12.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-iam 2.21.0-150400.9.11.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-kms 3.9.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-kms-inventory 0.4.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-logging 3.13.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-run 0.14.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-secret-manager 2.26.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-service-directory 1.16.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-spanner 3.58.0-150400.9.8.1 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-storage 3.8.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-cloud-vpc-access 1.15.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-crc32c +1 1.8.0-150400.9.8.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-google-resumable-media 2.8.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-googleapis-common-protos 1.72.0-150400.10.9.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-grpc-google-iam-v1 0.14.3-150400.9.6.2 SUSE-RU-2026:2816-1
SLES 15 SP4 python-grpc-interceptor 0.15.4-150400.9.4.1 SUSE-RU-2026:2816-1
SLES 15 SP4 python-proto-plus 1.26.1-150400.9.6.2 SUSE-RU-2026:2816-1
SLES 15 SP3 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
Show 16 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 15 SP2 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
SLES 12 python-dnspython 1.12.0-9.13.1 SUSE-SU-2024:3297-1, SUSE-SU-2024:2605-1
SLES 3 python-dnspython 2.3.0-150400.12.6.1 SUSE-SU-2024:2626-1
SLES 3 python-google-auth 2.47.0-150400.6.12.2 SUSE-RU-2026:2816-1
SLES 3 python-grpc-interceptor 0.15.4-150400.9.4.1 SUSE-RU-2026:2816-1
SLES 3 python-grpcio 1.60.1-150600.16.10.1 SUSE-RU-2026:2816-1
SLES 3 python-pytest-asyncio 1.0.0-150400.10.6.2 SUSE-RU-2026:2816-1
SLES for SAP 15 SP4 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
SLES for SAP 15 SP3 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
SLES for SAP 15 SP2 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
SLE Micro 6.0 python-dnspython 2.4.2-2.1 SUSE-SU-2025:20119-1
SLE Micro 5.5 python-dnspython 1.15.0-150000.3.5.1 SUSE-SU-2024:3298-1, SUSE-SU-2024:2655-1
SLE Micro 5.4 python-dnspython 1.15.0-150000.3.5.1 SUSE-SU-2024:3298-1, SUSE-SU-2024:2655-1
SLE Micro 5.3 python-dnspython 1.15.0-150000.3.5.1 SUSE-SU-2024:3298-1, SUSE-SU-2024:2655-1
SLE HPC 15 SP4 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
SLE HPC 15 SP3 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
SLE HPC 15 SP2 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
SUSE Manager Server 4.3 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
SUSE Manager Proxy 4.3 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
SUSE Enterprise Storage 7.1 python-dnspython 1.15.0-150000.3.10.2 SUSE-SU-2024:3298-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python-dnspython 2.6.1-1.1 openSUSE-SU-2026:11709-1, openSUSE-SU-2024:14062-1
openSUSE Tumbleweed python-eventlet 0.36.1-1.1 openSUSE-SU-2026:11577-1, openSUSE-SU-2024:14047-1
openSUSE Tumbleweed python-pymongo 4.16.0-1.1 openSUSE-SU-2026:10312-1
openSUSE Leap 15.6 python-dnspython 2.3.0-150400.12.6.1 SUSE-SU-2024:2626-1
openSUSE Leap 15.5 python-dnspython 1.15.0-150000.3.5.1 SUSE-SU-2024:3298-1, SUSE-SU-2024:2655-1, SUSE-SU-2024:2626-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.5 python-dnspython 1.15.0-150000.3.5.1 SUSE-SU-2024:3298-1, SUSE-SU-2024:2655-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 python3-dns +2 2.1.0-3.amzn2023.0.4 ALAS2023-2024-739
Amazon Linux 2 python-dns 1.12.0-4.20150617git465785f.amzn2.0.1 ALAS2-2024-2647

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 python3-dns 2.6.1-3.el9 ELSA-2024-9423
Oracle Linux 8 python3-dns 1.15.0-12.el8_10 ELSA-2024-3275

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling kubeflow-pipelines-visualization-server 2.2.0-r0 —
Wolfi rolling py3-dnspython 2.6.1-r0 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI dnspython < 2.6.1 2.6.1 GHSA-3rq5-2g8h-59hc
PyPI eventlet < 0.35.2 0.35.2 GHSA-3rq5-2g8h-59hc

Advisories 26

References