Lucene search
+L

86 matches found

osv_oesa
osv_oesa
•added 2026/11/11 12:25 p.m.•7 views

OESA-2026-4759 python-dns security update

\ Security Fixes: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU us...

7.5CVSS7.3AI score0.00481EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/11/06 12:00 a.m.•9 views

Dnspython < 2.9.0 DoS

The version of dnspython installed on the remote host is prior to 2.9.0. It is, therefore, affected by a denial of service vulnerability: - dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit...

7.5CVSS7.4AI score0.00481EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/11/05 12:00 a.m.•12 views

MiracleLinux 8 : python-dns-1.15.0-13.el8_10 (AXSA:2026-2258:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2258:01 advisory. dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal CVE-2026-114605 Tenable has extracted the preceding description block...

7.5CVSS7.5AI score0.00481EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/11/05 12:00 a.m.•10 views

Rocky Linux 8 [CIQ] Security Update: python3-dns (crlsa-2026_94749)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202694749 advisory. dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal CVE-2026-114605 Tenable has extracted the preceding description block...

7.5CVSS7.4AI score0.00481EPSS
SaveExploits0References6
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•9 views

OESA-2026-4674 python-dns security update

\ Security Fixes: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU us...

7.5CVSS7.3AI score0.00481EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•11 views

OESA-2026-4673 python-dns security update

\ Security Fixes: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU us...

7.5CVSS7.3AI score0.00481EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2026/11/04 1:54 p.m.•9 views

OESA-2026-4672 python-dns security update

\ Security Fixes: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU us...

7.5CVSS7.3AI score0.00481EPSS
SaveExploits0References2
Rockylinux
Rockylinux
•added 2026/11/04 9:02 a.m.•10 views

python-dns security update

An update is available for python-dns. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

7.5CVSS7.3AI score0.00481EPSS
SaveExploits0
osv_rlsa
osv_rlsa
•added 2026/11/04 9:02 a.m.•18 views

RLSA-2026:94749 Important: python-dns security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS7.3AI score0.00481EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/11/04 12:00 a.m.•12 views

RockyLinux 8 : python-dns (RLSA-2026:94749)

The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:94749 advisory. dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal CVE-2026-114605 Tenable has extracted the preceding description block...

7.5CVSS7.5AI score0.00481EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/11/04 12:00 a.m.•10 views

Oracle Linux 8 : python-dns (ELSA-2026-94749)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-94749 advisory. 1.15.0-13 - CVE-2026-114605 python-dns: dnspython: Denial of Service via excessive DNS compression pointer traversal Resolves: RHEL-290592 Tenable has extracte...

7.5CVSS7.4AI score0.00481EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/11/03 8:32 p.m.•11 views

dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal

A flaw was found in dnspython. A remote attacker can cause a Denial of Service DoS by sending a specially crafted Domain Name System DNS message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed...

7.5CVSS7.1AI score0.00481EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/11/03 8:32 p.m.•11 views

Important: Red Hat Security Advisory: python-dns security update

An update for python-dns is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

7.5CVSS7.3AI score0.00481EPSS
SaveExploits0References2
osv_alsa
osv_alsa
•added 2026/11/03 12:00 a.m.•18 views

ALSA-2026:94749 Important: python-dns security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS7.4AI score0.00481EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/11/03 12:00 a.m.•9 views

RHEL 8 : python-dns (RHSA-2026:94749)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:94749 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

7.5CVSS7.4AI score0.00481EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2026/11/03 12:00 a.m.•10 views

Important: python-dns security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS7.4AI score0.00481EPSS
SaveExploits0References4
Oracle linux
Oracle linux
•added 2026/11/03 12:00 a.m.•14 views

python-dns security update

1.15.0-13 - CVE-2026-114605 python-dns: dnspython: Denial of Service via excessive DNS compression pointer traversal Resolves: RHEL-290592...

7.5CVSS7.4AI score0.00481EPSS
SaveExploits0
Amazon
Amazon
•added 2026/10/30 12:00 a.m.•20 views

Important: python-dns

Issue Overview: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use,...

7.5CVSS7.3AI score0.00481EPSS
SaveExploits0
Amazon
Amazon
•added 2026/10/30 12:00 a.m.•14 views

Important: python-dns

Issue Overview: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use,...

7.5CVSS7.4AI score0.00481EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/30 12:00 a.m.•15 views

Amazon Linux 2023 : python3-dns, python3-dns+dnssec, python3-dns+idna (ALAS2023-2026-3357)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3357 advisory. dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker- controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can...

7.5CVSS7.4AI score0.00481EPSS
SaveExploits0References4
Rows per page
Query Builder