PYSEC-2022-4

2022-01-1014:12:00

Google

osv.dev

0.001 Low

EPSS

Percentile

31.5%

JSON

The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query.

CPENameOperatorVersion
dnslibeq0.9.12
dnslibeq0.8.3
dnslibeq0.6.1
dnslibeq0.5
dnslibeq0.9.13
dnslibeq0.3.2
dnslibeq0.9.2
dnslibeq0.3.3
dnslibeq0.6
dnslibeq0.9.8

Name	Operator	Version
dnslib	eq	0.9.12
dnslib	eq	0.8.3
dnslib	eq	0.6.1
dnslib	eq	0.5
dnslib	eq	0.9.13
dnslib	eq	0.3.2
dnslib	eq	0.9.2
dnslib	eq	0.3.3
dnslib	eq	0.6
dnslib	eq	0.9.8

Rows per page:

1-10 of 321

References

github.com/advisories/GHSA-r478-c2pc-m7gx

github.com/paulc/dnslib/issues/30

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for OSV:PYSEC-2022-4