Lucene search

K
osvGoogleOSV:RLSA-2024:3275
HistoryJun 14, 2024 - 1:59 p.m.

Moderate: python-dns security update

2024-06-1413:59:16
Google
osv.dev
python-dns package
dnslib module
dns client
symbolic constants
dnspython
denial of service
stub resolver
cve-2023-29483

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

The python-dns package contains the dnslib module that implements a DNS client and additional modules that define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode.

Security Fix(es):

  • dnspython: denial of service in stub resolver (CVE-2023-29483)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.