86 matches found
OESA-2026-4759 python-dns security update
\ Security Fixes: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU us...
Dnspython < 2.9.0 DoS
The version of dnspython installed on the remote host is prior to 2.9.0. It is, therefore, affected by a denial of service vulnerability: - dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit...
MiracleLinux 8 : python-dns-1.15.0-13.el8_10 (AXSA:2026-2258:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2258:01 advisory. dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal CVE-2026-114605 Tenable has extracted the preceding description block...
Rocky Linux 8 [CIQ] Security Update: python3-dns (crlsa-2026_94749)
The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202694749 advisory. dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal CVE-2026-114605 Tenable has extracted the preceding description block...
OESA-2026-4674 python-dns security update
\ Security Fixes: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU us...
OESA-2026-4673 python-dns security update
\ Security Fixes: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU us...
OESA-2026-4672 python-dns security update
\ Security Fixes: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU us...
python-dns security update
An update is available for python-dns. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...
RLSA-2026:94749 Important: python-dns security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
RockyLinux 8 : python-dns (RLSA-2026:94749)
The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:94749 advisory. dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal CVE-2026-114605 Tenable has extracted the preceding description block...
Oracle Linux 8 : python-dns (ELSA-2026-94749)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-94749 advisory. 1.15.0-13 - CVE-2026-114605 python-dns: dnspython: Denial of Service via excessive DNS compression pointer traversal Resolves: RHEL-290592 Tenable has extracte...
dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal
A flaw was found in dnspython. A remote attacker can cause a Denial of Service DoS by sending a specially crafted Domain Name System DNS message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed...
Important: Red Hat Security Advisory: python-dns security update
An update for python-dns is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
ALSA-2026:94749 Important: python-dns security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
RHEL 8 : python-dns (RHSA-2026:94749)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:94749 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
Important: python-dns security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
python-dns security update
1.15.0-13 - CVE-2026-114605 python-dns: dnspython: Denial of Service via excessive DNS compression pointer traversal Resolves: RHEL-290592...
Important: python-dns
Issue Overview: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use,...
Important: python-dns
Issue Overview: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use,...
Amazon Linux 2023 : python3-dns, python3-dns+dnssec, python3-dns+idna (ALAS2023-2026-3357)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3357 advisory. dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker- controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can...