CVE-2026-114605

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...

EUVD-2026-108227

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...

CVE-2026-114605

The dnspython DNS toolkit for Python is vulnerable to excessive CPU use in versions prior to 2.9.0 . The root cause is located in dns.name.from_wire_parser(), which follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can trigger exce...

CVE-2026-114605 dnspython dns.name.from_wire_parser() excessive CPU use

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...