Vulnerabilidades de rthalley dnspython (CVE)

Registros CVE publicados para rthalley dnspython, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados
7.5Alta

dnspython excessive memory and CPU use

rthalley dnspython

dnspython is a DNS toolkit for Python. Prior to version 2.9.2, the from_text() parser for WKS records does not require the service number to be between 0 and 65535 before using it as a bitmap offset. An attacker-controlled zone file can supply a larger number…

7.5Alta
CVE-2026-114605

dnspython dns.name.from_wire_parser() excessive CPU use

rthalley dnspython

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompressio…