https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:43:09 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:3275 <p><strong>Affected:</strong> AlmaLinux:8: python3-dns</p> <p>The python-dns package contains the dnslib module that implements a DNS client and additional modules that define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode.</p> <p>Security Fix(es):</p> <p>* dnspython: denial of service in stub resolver (CVE-2023-29483)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: python3-dns</p> <p>The python-dns package contains the dnslib module that implements a DNS client and additional modules that define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode.</p> <p>Security Fix(es):</p> <p>* dnspython: denial of service in stub resolver (CVE-2023-29483)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:3275 https://cve.radiocsirt.org/vuln/bdu:2025-03301 bdu:2025-03301 https://cve.radiocsirt.org/vuln/bdu:2025-03301 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2023-29483 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &#34;TuDoor&#34; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &#34;TuDoor&#34; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2023-29483 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0385 certfr-2024-avi-0385 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0385 https://cve.radiocsirt.org/vuln/euvd-2026-258973 EUVD-2026-258973 https://cve.radiocsirt.org/vuln/euvd-2026-258973 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29483 <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &#34;TuDoor&#34; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.</p> <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &#34;TuDoor&#34; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-29483 https://cve.radiocsirt.org/vuln/ghsa-3rq5-2g8h-59hc <p><strong>Affected:</strong> PyPI: eventlet, PyPI: dnspython</p> <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &#34;TuDoor&#34; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.</p> <p><strong>Affected:</strong> PyPI: eventlet, PyPI: dnspython</p> <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &#34;TuDoor&#34; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.</p> https://cve.radiocsirt.org/vuln/ghsa-3rq5-2g8h-59hc https://cve.radiocsirt.org/vuln/gsd-2023-29483 gsd-2023-29483 https://cve.radiocsirt.org/vuln/gsd-2023-29483 https://cve.radiocsirt.org/vuln/oesa-2025-1138 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: python-dns</p> <p>\ Security Fix(es):</p> <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &amp;quot;TuDoor&amp;quot; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.(CVE-2023-29483)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: python-dns</p> <p>\ Security Fix(es):</p> <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &amp;quot;TuDoor&amp;quot; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.(CVE-2023-29483)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1138 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14047-1 <p>python310-eventlet-0.36.1-1.1 on GA media</p> <p>python310-eventlet-0.36.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14047-1 https://cve.radiocsirt.org/vuln/pysec-2026-1307 <p><strong>Affected:</strong> PyPI: dnspython</p> <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &#34;TuDoor&#34; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.</p> <p><strong>Affected:</strong> PyPI: dnspython</p> <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &#34;TuDoor&#34; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1307 https://cve.radiocsirt.org/vuln/rhsa-2024:0045 <p>dnspython: denial of service in stub resolver golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm containers/image: digest type does not guarantee valid type golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm golang: net/mail: comments in display names are incorrectly handled golang: html/template: errors returned from MarshalJSON methods may break template escaping golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON jose: resource exhaustion</p> <p>dnspython: denial of service in stub resolver golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm containers/image: digest type does not guarantee valid type golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm golang: net/mail: comments in display names are incorrectly handled golang: html/template: errors returned from MarshalJSON methods may break template escaping golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON jose: resource exhaustion</p> https://cve.radiocsirt.org/vuln/rhsa-2024:0045 https://cve.radiocsirt.org/vuln/suse-su-2024:2605-1 <p>Security update for python-dnspython</p> <p>Security update for python-dnspython</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2605-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-29483 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: dnspython, Ubuntu:16.04:LTS: dnspython, Ubuntu:18.04:LTS: dnspython, Ubuntu:20.04:LTS: dnspython, Ubuntu:22.04:LTS: dnspython</p> <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &#34;TuDoor&#34; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: dnspython, Ubuntu:16.04:LTS: dnspython, Ubuntu:18.04:LTS: dnspython, Ubuntu:20.04:LTS: dnspython, Ubuntu:22.04:LTS: dnspython</p> <p>eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a &#34;TuDoor&#34; attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-29483 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1213 <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1213