eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.

The version of AOS installed on the remote host is prior to 7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0 advisory.

  - squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different     vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link     and then contents under the same filename in a filesystem can cause unsquashfs to first create the     symbolic link pointing outside the expected directory, and then the subsequent write operation will cause     the unsquashfs process to write through the symbolic link elsewhere in the filesystem. (CVE-2021-41072)

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache     Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers     correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect     infinite timeout which allowed connections to remain open which should have been closed. This issue     affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1     through 9.0.89. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the     issue. (CVE-2024-34750)

  - Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of     service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of     Service (ReDoS) in package_index.py. (CVE-2022-40897)

  - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In     affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol,     but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated,     thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an     exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.
    (CVE-2023-23931)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-9423 advisory.

    [2.6.1-3]
    - Ensure dns.rdtypes subpackages are available       Related: RHEL-32663

    [2.6.1-2]
    - Add missing files due to build change from hatchling to setuptools       Related: RHEL-32663

    [2.6.1-1]
    - Rebase to 2.6.1       Resolves: RHEL-32628, RHEL-32663

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9423 advisory.

    The python-dns package contains the dnslib module that implements a DNS client and additional modules that     define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode.

    Security Fix(es):

    * dnspython: denial of service in stub resolver (CVE-2023-29483)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the python-dns package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS     name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a     'TuDoor' attack. In other words, dnspython does not have the preferred behavior in which the DNS name     resolution algorithm would proceed, within the full time window, in order to wait for a valid packet.
    NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.(CVE-2023-29483)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization python-dns security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-739 advisory.

    eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS     name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a     TuDoor attack. In other words, dnspython does not have the preferred behavior in which the DNS name     resolution algorithm would proceed, within the full time window, in order to wait for a valid packet.
    NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1. (CVE-2023-29483)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the python-dns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS     name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a     'TuDoor' attack. In other words, dnspython does not have the preferred behavior in which the DNS name     resolution algorithm would proceed, within the full time window, in order to wait for a valid packet.
    NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.(CVE-2023-29483)

Tenable has extracted the preceding description block directly from the EulerOS python-dns security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of python-dns installed on the remote host is prior to 1.12.0-4.20150617git465785f. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2647 advisory.

    eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS     name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a     TuDoor attack. In other words, dnspython does not have the preferred behavior in which the DNS name     resolution algorithm would proceed, within the full time window, in order to wait for a valid packet.
    NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1. (CVE-2023-29483)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3297-1 advisory.

    This update for python-dnspython fixes the following issue:

    - Fix CVE-2023-29483 (bsc#1230353).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3298-1 advisory.

    This update for python-dnspython fixes the following issue:

    - Fix CVE-2023-29483 (bsc#1230353).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the python3 package has been released.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2655-1 advisory.

    - CVE-2023-29483: Fixed an issue that allowed remote attackers to         interfere with DNS name resolution (bsc#1222693).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2626-1 advisory.

    - CVE-2023-29483: Fixed an issue that allowed remote attackers to       interfere with DNS name resolution (bsc#1222693).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2605-1 advisory.

    - CVE-2023-29483: Fixed an issue that allowed remote attackers to       interfere with DNS name resolution (bsc#1222693).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0045 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container     Platform 4.16.0. See the following advisory for the container images for     this release:

    https://access.redhat.com/errata/RHSA-2024:0041

    Security Fix(es):

    * dnspython: denial of service in stub resolver (CVE-2023-29483)
    * golang: net/http/cookiejar: incorrect forwarding of sensitive headers and     cookies on HTTP redirect (CVE-2023-45289)
    * golang: net/http: memory exhaustion in Request.ParseMultipartForm     (CVE-2023-45290)
    * containers/image: digest type does not guarantee valid type     (CVE-2024-3727)
    * golang: crypto/x509: Verify panics on certificates with an unknown public     key algorithm (CVE-2024-24783)
    * golang: net/mail: comments in display names are incorrectly handled     (CVE-2024-24784)
    * golang: html/template: errors returned from MarshalJSON methods may break     template escaping (CVE-2024-24785)
    * golang-protobuf: encoding/protojson, internal/encoding/json: infinite     loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON     (CVE-2024-24786)
    * jose: resource exhaustion (CVE-2024-28176)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

    All OpenShift Container Platform 4.16 users are advised to upgrade to these     updated packages and images when they are available in the appropriate     release channel. To check for available updates, use the OpenShift CLI (oc)     or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3b4c7849ab advisory.

    Update to 2.6.1 (rhbz#2263657)

    ----

    Fix for CVE-2023-29483 (rhbz#2274685)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:3275 advisory.

    * dnspython: denial of service in stub resolver (CVE-2023-29483)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - dnspython: denial of service in stub resolver (CVE-2023-29483)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-3275 advisory.

    [1.15.0-12]
    - Security fix for CVE-2023-29483     Resolves: RHEL-32630

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:3275 advisory.

    The python-dns package contains the dnslib module that implements a DNS client and additional modules that     define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode.

    Security Fix(es):

    * dnspython: denial of service in stub resolver (CVE-2023-29483)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2024:3275 advisory.

  - eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS     name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a     TuDoor attack. In other words, dnspython does not have the preferred behavior in which the DNS name     resolution algorithm would proceed, within the full time window, in order to wait for a valid packet.
    NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1. (CVE-2023-29483)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-bbd76d7c63 advisory.

    Fix for CVE-2023-29483 (rhbz#2274685)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-930af3332f advisory.

    Update to 2.6.1 (rhbz#2263657) (refix for CVE-2023-29483)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of dnspython installed on the remote host is prior to 2.6.0rc1. It is, therefore, affected by a denial of service (DoS) vulnerability. The dnspython stub resolver is vulnerable to a potential DoS if a bad-in-some-way response from the right address and port forged by an attacker arrives before a legitimate one on the UDP port dnspython is using for that query. In this situation, dnspython might switch to querying another resolver or give up entirely, possibly denying service for that resolution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. Also note that this plugin does not distinguish between Python packages installed via the OS package manager, Python packages installed via PIP, or other sources. As a result, packages provided by your OS package repository may have backported fixes that this plugin may incorrectly report as vulnerable. Please refer to the OS-specific plugins for CVE-2023-29483 to check for backported fixes.

ID	Name	Product	Family	Severity
212124	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0)	Nessus	Misc.	medium
211553	Oracle Linux 9 : python-dns (ELSA-2024-9423)	Nessus	Oracle Linux Local Security Checks	high
210797	RHEL 9 : python-dns (RHSA-2024:9423)	Nessus	Red Hat Local Security Checks	high
209772	EulerOS Virtualization 2.12.1 : python-dns (EulerOS-SA-2024-2758)	Nessus	Huawei Local Security Checks	high
209770	EulerOS Virtualization 2.12.0 : python-dns (EulerOS-SA-2024-2776)	Nessus	Huawei Local Security Checks	high
208974	Amazon Linux 2023 : python3-dns, python3-dns+dnssec, python3-dns+idna (ALAS2023-2024-739)	Nessus	Amazon Linux Local Security Checks	high
208390	EulerOS 2.0 SP12 : python-dns (EulerOS-SA-2024-2513)	Nessus	Huawei Local Security Checks	high
208355	EulerOS 2.0 SP11 : python-dns (EulerOS-SA-2024-2564)	Nessus	Huawei Local Security Checks	high
208342	EulerOS 2.0 SP12 : python-dns (EulerOS-SA-2024-2538)	Nessus	Huawei Local Security Checks	high
208322	EulerOS 2.0 SP11 : python-dns (EulerOS-SA-2024-2590)	Nessus	Huawei Local Security Checks	high
208106	Amazon Linux 2 : python-dns (ALAS-2024-2647)	Nessus	Amazon Linux Local Security Checks	high
207424	SUSE SLES12 Security Update : python-dnspython (SUSE-SU-2024:3297-1)	Nessus	SuSE Local Security Checks	high
207421	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-dnspython (SUSE-SU-2024:3298-1)	Nessus	SuSE Local Security Checks	high
204964	Photon OS 5.0: Python3 PHSA-2024-5.0-0338	Nessus	PhotonOS Local Security Checks	high
204884	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-dnspython (SUSE-SU-2024:2655-1)	Nessus	SuSE Local Security Checks	high
204878	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-dnspython (SUSE-SU-2024:2626-1)	Nessus	SuSE Local Security Checks	high
204758	SUSE SLES12 Security Update : python-dnspython (SUSE-SU-2024:2605-1)	Nessus	SuSE Local Security Checks	high
201091	RHEL 8 / 9 : OpenShift Container Platform 4.16.0 (RHSA-2024:0045)	Nessus	Red Hat Local Security Checks	high
201005	Fedora 39 : python-dns (2024-3b4c7849ab)	Nessus	Fedora Local Security Checks	high
200595	Rocky Linux 8 : python-dns (RLSA-2024:3275)	Nessus	Rocky Linux Local Security Checks	high
199902	RHEL 8 : python-dns (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198081	Oracle Linux 8 : python-dns (ELSA-2024-3275)	Nessus	Oracle Linux Local Security Checks	high
197793	RHEL 8 : python-dns (RHSA-2024:3275)	Nessus	Red Hat Local Security Checks	high
197660	CentOS 8 : python-dns (CESA-2024:3275)	Nessus	CentOS Local Security Checks	high
195285	Fedora 38 : python-dns (2024-bbd76d7c63)	Nessus	Fedora Local Security Checks	high
194933	Fedora 40 : python-dns (2024-930af3332f)	Nessus	Fedora Local Security Checks	high
192941	Dnspython < 2.6.0rc1 DoS	Nessus	Misc.	high

Detections

Analytics

CVE-2023-29483

high

Tenable Plugins

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high