rthalley dnspython Schwachstellen (CVE)

Für rthalley dnspython veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse
7.5Hoch
CVE-2026-128089

dnspython excessive memory and CPU use

rthalley dnspython

dnspython is a DNS toolkit for Python. Prior to version 2.9.2, the from_text() parser for WKS records does not require the service number to be between 0 and 65535 before using it as a bitmap offset. An attacker-controlled zone file can supply a larger number…

7.5Hoch
CVE-2026-114605

dnspython dns.name.from_wire_parser() excessive CPU use

rthalley dnspython

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompressio…