Lucene search
+L

180 matches found

NVD
NVD
•added 2024/04/11 2:15 p.m.•23 views

CVE-2023-29483

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...

7CVSS8.3AI score0.01857EPSS
SaveExploits1References12
OSV
OSV
•added 2024/04/11 2:15 p.m.•11 views

UBUNTU-CVE-2023-29483

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...

7CVSS7AI score0.01857EPSS
SaveExploits1References3
OSV
OSV
•added 2024/04/11 12:00 a.m.•39 views

CVE-2023-29483

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...

7CVSS6.8AI score
SaveExploits0References14
Vulnrichment
Vulnrichment
•added 2024/04/11 12:00 a.m.•16 views

CVE-2023-29483

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...

6.8AI score0.01857EPSS
SaveExploits1References10
Cvelist
Cvelist
•added 2024/04/11 12:00 a.m.•38 views

CVE-2023-29483

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...

6.6AI score0.01857EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/11 12:00 a.m.•2 views

CVE-2023-29483: DEPRECATED: Trusting Self-reported DNS Name

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...

7CVSS5.9AI score0.01857EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/11 12:00 a.m.•10 views

Eventlet 安全漏洞

Eventlet is a concurrent networking library for Python. A security vulnerability exists in Eventlet versions prior to 0.35.2 that originated from allowing remote attackers to interfere with DNS name resolution by rapidly sending invalid packets from the expected IP address and source port...

7CVSS7.2AI score0.01857EPSS
SaveExploits1References12
Debian CVE
Debian CVE
•added 2024/04/11 12:00 a.m.•54 views

CVE-2023-29483

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...

7CVSS7AI score0.01857EPSS
SaveExploits1
Redos
Redos
•added 2024/04/09 12:00 a.m.•29 views

ROS-20240409-13

A vulnerability in the python-eventlet library of the OpenStack Platform cloud building platform is related to incorrect resource sweeping or freeing. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

7.5CVSS7.1AI score0.00795EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/02/09 12:00 a.m.•13 views

PT-2024-12218

Name of the Vulnerable Software and Affected Versions dnspython versions prior to 2.6.1 eventlet versions prior to 0.35.2 Description The issue allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, also kno...

7CVSS6AI score0.01857EPSS
SaveExploits1References88
RedHat Linux
RedHat Linux
•added 2024/01/16 2:36 p.m.•14 views

python-eventlet: patch regression for CVE-2021-21419 in some Red Hat builds

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

7.5CVSS7.3AI score0.01792EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/01/16 2:33 p.m.•48 views

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-eventlet) security update

An update for python-eventlet is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.7AI score0.01792EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2024/01/16 2:33 p.m.•11 views

python-eventlet: patch regression for CVE-2021-21419 in some Red Hat builds

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

7.5CVSS7.3AI score0.01792EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•42 views

RHEL 9 : Red Hat OpenStack Platform 17.1 (python-eventlet) (RHSA-2024:0213)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:0213 advisory. Eventlet is a networking library written in Python. It achieves high scalability by using non-blocking io while at the same time retaining high...

7.5CVSS6.8AI score0.01792EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2023/11/29 12:00 a.m.•23 views

The vulnerability of the python-eventlet library used by the OpenStack Platform for building cloud solutions allows a attacker to cause service failures.

The vulnerability of the python-eventlet library used by the OpenStack Platform for building cloud solutions is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.4AI score0.00795EPSS
SaveExploits0References5Affected Software4
SUSE CVE
SUSE CVE
•added 2023/11/03 1:43 a.m.•8 views

SUSE CVE-2023-5625

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

7.5CVSS7.5AI score0.00795EPSS
SaveExploits0References3
OSV
OSV
•added 2023/11/01 2:15 p.m.•16 views

CVE-2023-5625

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

7.5CVSS5.5AI score0.00795EPSS
SaveExploits0References5
NVD
NVD
•added 2023/11/01 2:15 p.m.•51 views

CVE-2023-5625

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

7.5CVSS6.2AI score0.00795EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2023/11/01 2:15 p.m.•46 views

CVE-2023-5625

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

7.5CVSS6.7AI score0.00795EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/01 2:15 p.m.•33 views

Design/Logic Flaw

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

5CVSS5.4AI score0.01792EPSS
SaveExploits0References5Affected Software5
Rows per page
Query Builder