CVE-2023-29483: High severity IBM Concert Software vulnerability
Dnspython is vulnerable to a denial of service, caused by a flaw in stub resolver when a bad-in-some-way response arrives before a legitimate one on the UDP port dnspython is using for that query. By sending a specially crafted query, a remote attacker could exploit this vulnerability to cause a denial of service condition.
Other sources
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.
— GitHub
The dnspython stub resolver is vulnerable to a potential DoS if a bad-in-some-way response from the right address and port forged by an attacker arrives before a legitimate one on the UDP port dnspython happens to be using for that single query.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-29483?
CVE-2023-29483 has a severity rating that categorizes it as a denial of service vulnerability.
How do I fix CVE-2023-29483?
To fix CVE-2023-29483, update dnspython to version 2.6.1 or later, or downgrade to a secure version if using affected packages.
Which software is affected by CVE-2023-29483?
CVE-2023-29483 affects dnspython versions before 2.6.1, eventlet versions before 0.35.2, and IBM Concert Software versions up to 1.0.2.1.
What type of vulnerability is CVE-2023-29483?
CVE-2023-29483 is a denial of service vulnerability that can be exploited through specially crafted queries.
How can an attacker exploit CVE-2023-29483?
An attacker can exploit CVE-2023-29483 by sending a specially crafted query that disrupts the dnspython stub resolver's handling of responses.