eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0045 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container     Platform 4.16.0. See the following advisory for the container images for     this release:

    https://access.redhat.com/errata/RHSA-2024:0041

    Security Fix(es):

    * dnspython: denial of service in stub resolver (CVE-2023-29483)
    * golang: net/http/cookiejar: incorrect forwarding of sensitive headers and     cookies on HTTP redirect (CVE-2023-45289)
    * golang: net/http: memory exhaustion in Request.ParseMultipartForm     (CVE-2023-45290)
    * containers/image: digest type does not guarantee valid type     (CVE-2024-3727)
    * golang: crypto/x509: Verify panics on certificates with an unknown public     key algorithm (CVE-2024-24783)
    * golang: net/mail: comments in display names are incorrectly handled     (CVE-2024-24784)
    * golang: html/template: errors returned from MarshalJSON methods may break     template escaping (CVE-2024-24785)
    * golang-protobuf: encoding/protojson, internal/encoding/json: infinite     loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON     (CVE-2024-24786)
    * jose: resource exhaustion (CVE-2024-28176)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

    All OpenShift Container Platform 4.16 users are advised to upgrade to these     updated packages and images when they are available in the appropriate     release channel. To check for available updates, use the OpenShift CLI (oc)     or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3b4c7849ab advisory.

    Update to 2.6.1 (rhbz#2263657)

    ----

    Fix for CVE-2023-29483 (rhbz#2274685)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:3275 advisory.

    * dnspython: denial of service in stub resolver (CVE-2023-29483)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - dnspython: denial of service in stub resolver (CVE-2023-29483)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-3275 advisory.

    [1.15.0-12]
    - Security fix for CVE-2023-29483     Resolves: RHEL-32630

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:3275 advisory.

    The python-dns package contains the dnslib module that implements a DNS client and additional modules that     define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode.

    Security Fix(es):

    * dnspython: denial of service in stub resolver (CVE-2023-29483)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2024:3275 advisory.

  - eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS     name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a     TuDoor attack. In other words, dnspython does not have the preferred behavior in which the DNS name     resolution algorithm would proceed, within the full time window, in order to wait for a valid packet.
    NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1. (CVE-2023-29483)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-bbd76d7c63 advisory.

  - eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS     name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a     TuDoor attack. In other words, dnspython does not have the preferred behavior in which the DNS name     resolution algorithm would proceed, within the full time window, in order to wait for a valid packet.
    NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1. (CVE-2023-29483)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-930af3332f advisory.

  - eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS     name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a     TuDoor attack. In other words, dnspython does not have the preferred behavior in which the DNS name     resolution algorithm would proceed, within the full time window, in order to wait for a valid packet.
    NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1. (CVE-2023-29483)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of dnspython installed on the remote host is prior to 2.6.0rc1. It is, therefore, affected by a denial of service (DoS) vulnerability. The dnspython stub resolver is vulnerable to a potential DoS if a bad-in-some-way response from the right address and port forged by an attacker arrives before a legitimate one on the UDP port dnspython is using for that query. In this situation, dnspython might switch to querying another resolver or give up entirely, possibly denying service for that resolution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. Also note that this plugin does not distinguish between Python packages installed via the OS package manager, Python packages installed via PIP, or other sources. As a result, packages provided by your OS package repository may have backported fixes that this plugin may incorrectly report as vulnerable. Please refer to the OS-specific plugins for CVE-2023-29483 to check for backported fixes.

ID	Name	Product	Family	Severity
201091	RHEL 9 : OpenShift Container Platform 4.16.0 (RHSA-2024:0045)	Nessus	Red Hat Local Security Checks	high
201005	Fedora 39 : python-dns (2024-3b4c7849ab)	Nessus	Fedora Local Security Checks	high
200595	Rocky Linux 8 : python-dns (RLSA-2024:3275)	Nessus	Rocky Linux Local Security Checks	high
199902	RHEL 8 : python-dns (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198081	Oracle Linux 8 : python-dns (ELSA-2024-3275)	Nessus	Oracle Linux Local Security Checks	high
197793	RHEL 8 : python-dns (RHSA-2024:3275)	Nessus	Red Hat Local Security Checks	medium
197660	CentOS 8 : python-dns (CESA-2024:3275)	Nessus	CentOS Local Security Checks	medium
195285	Fedora 38 : python-dns (2024-bbd76d7c63)	Nessus	Fedora Local Security Checks	medium
194933	Fedora 40 : python-dns (2024-930af3332f)	Nessus	Fedora Local Security Checks	medium
192941	Dnspython < 2.6.0rc1 DoS	Nessus	Misc.	medium

Detections

Analytics

CVE-2023-29483

high

Tenable Plugins

high

high

high

high

high

medium

medium

medium

medium

medium