CVE-2022-22846

2022-01-1014:12:58

Google

osv.dev

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query.

CPENameOperatorVersion
dnslibeq0.9.5
dnslibeq0.9.6
dnslibeqpy3-release
dnslibeq0.8.3
dnslibeq0.9.7
dnslibeq0.9.15
dnslibeq0.9.13
dnslibeq0.9.16
dnslibeq0.9.14
dnslibeqpy2

Name	Operator	Version
dnslib	eq	0.9.5
dnslib	eq	0.9.6
dnslib	eq	py3-release
dnslib	eq	0.8.3
dnslib	eq	0.9.7
dnslib	eq	0.9.15
dnslib	eq	0.9.13
dnslib	eq	0.9.16
dnslib	eq	0.9.14
dnslib	eq	py2

Rows per page:

1-10 of 121

References

github.com/paulc/dnslib/issues/30