Homepage

dnspython@2.5.0rc1

DNS toolkit

  • latest version

    2.8.0

  • latest non vulnerable version

    2.8.0

  • first published

    13 years ago

  • latest version published

    1 years ago

  • licenses detected

  • View dnspython package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the dnspython package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Incorrect Behavior Order

    Affected versions of this package are vulnerable to Incorrect Behavior Order in the DNS pre-processing pipeline, which allows an off-path attacker who can spoof the source IP address of a malformed DNS response packet to cause denial of service. The UDP processing functions in query.py and asyncquery.py accept the first-arriving packet before closing the receiving socket, allowing the attacker to make the remote nameserver appear unavailable for the target resolver and clients.

    How to fix Incorrect Behavior Order?

    Upgrade dnspython to version 2.6.1 or higher.

    [,2.6.1)
    Go back to all versions of this package