dnspython Pre-2.9.0 DNS.name.from_wire_parser() CPU Exhaustion DoS (CVE-2026-114605)

Vulnerability Overview Vulnerability Name: Excessive CPU Usage Severity: High (7.5 / 10) Description: Maliciously crafted DNS messages can cause to consume excessive CPU during DNS name resolution. Applications processing unvalidated DNS messages may experience performance degradation or denial of service (DoS) due to high CPU utilization. Scope of Impact Affected Versions: Versions of earlier than 2.9.0 Affected Component: The function in the library Remediation Patch: This issue has been fixed in version 2.9.0. Workaround: No known workaround is available. Credits Discoverers: - Evgueni Gkikis, Department of Informatics, University of Piraeus & Athena Research Center, Greece - Constantinos Patsakis, Department of Informatics, University of Piraeus & Athena Research Center, Greece - George Stergiopoulos, Department of Informatics, Athens University of Economics and Business, Greece CVE ID CVE-2026-114605 Vulnerability Details Attack Vector: Network Attack Complexity: Low Required Privileges: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High Vulnerability Links GitHub Link: https://github.com/rthalley/dnspython/security/advisories/GHSA-455J-73JF-pv6m Vulnerability Discoverers edkikis tpatsakis gstergiop Vulnerability Timeline Release Date: 2 weeks ago Vulnerability Status Fixed: Yes Vulnerability Impact Performance Degradation: Yes Denial of Service (DoS): Yes Vulnerability Fix Version Fixed Version: 2.9.0 Vulnerability Discoverer Information Evgueni Gkikis: Department of Informatics, University of Piraeus & Athena Research Center, Greece Constantinos Patsakis: Department of Informatics, University of Piraeus & Athena Research Center, Greece George Stergiopoulos: Department of Informatics, Athens University of Economics and Business, Greece Vulnerability Discoverer Contributions Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Details edkikis: Discoverer tpatsakis: Discoverer gstergiop: Discoverer Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Discoverers: edkikis, tpatsakis, gstergiop Vulnerability Discoverer Contribution Summary Di

Goal Reached Thanks to every supporter — we hit 100%!

dnspython Pre-2.9.0 DNS.name.from_wire_parser() CPU Exhaustion DoS (CVE-2026-114605)

More from this source