~ / search / GHSA-45c3-73f7-pv4m

GHSA-45c3-73f7-pv4m

dnspython dns.name.from_wire_parser() excessive CPU use

Source: GitHub Advisory Database (reviewed) High CVE-2026-114605

Packages

EcosystemPackageAffectedFixed in
PyPI dnspython < 2.9.0 2.9.0

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact A maliciously crafted DNS message may cause dns.name.from_wire_parser() to use excessive CPU for DNS name decompression. Applications that process untrusted DNS wire form messages with dnspython may be degraded or DoS'd by the extra CPU use required. ### Patches This problem is fixed in dnspython 2.9.0. ### Workarounds There are no known workarounds. ### Credit Evgenios Gkritsis, Department of Informatics, University of Piraeus & Athena Research Center, Greece Constantinos Patsakis, Department of Informatics, University of Piraeus & Athena Research Center, Greece George Stergiopoulos, Department of Informatics, Athens University of Economics and Business, Greece

References

External links from the advisory. They lead to third-party sites.