Denial of Service Vulnerability in dnspython DNS Toolkit

CVE-2026-114605

What is CVE-2026-114605?

dnspython, a widely used DNS toolkit for Python, contains a vulnerability that allows attacker-controlled DNS compression pointer chains to be processed without a hop limit in versions prior to 2.9.0. This flaw can lead to excessive pointer traversal during name decompression, which may result in significant CPU usage and application performance degradation. Applications that handle untrusted DNS messages are particularly susceptible, as they can experience a denial of service, effectively blocking legitimate traffic. An update was released in version 2.9.0 to rectify this issue, providing enhanced security for users.

References