CVE-2023-29483

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Weakness enumeration

CWE-292

Affected software

No affected versions have been published.

Timeline

Published: Apr 11, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-294846.5In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password.CVE-2023-294859.8An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to bypass CVE-2023-294869.8An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions CVE-2023-294879.1An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to cause CVE-2023-294896.1An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The CVE-2023-29496.1Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1.CVE-2023-294917.8ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malfor CVE-2023-294929.8Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This doe CVE-2023-294946.7Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege CVE-2023-294957.8Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalatio CVE-2023-294973.3A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to acces CVE-2023-294985.5Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier. If a user opens