rthalley dnspython güvenlik açıkları (CVE)

rthalley dnspython için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç
7.5Yüksek

dnspython excessive memory and CPU use

rthalley dnspython

dnspython is a DNS toolkit for Python. Prior to version 2.9.2, the from_text() parser for WKS records does not require the service number to be between 0 and 65535 before using it as a bitmap offset. An attacker-controlled zone file can supply a larger number…

7.5Yüksek
CVE-2026-114605

dnspython dns.name.from_wire_parser() excessive CPU use

rthalley dnspython

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompressio…