PyPI/dnslib CVE-2022-22846: high 7.5, EPSS 0.84%

dnslib has DNS reply verification issue

Action: Upgrade dnslib to 0.9.17 or later.

pip install dnslib==0.9.17

Affected

Fixed versions

Sources

• osv: GHSA-r478-c2pc-m7gx
• https://nvd.nist.gov/vuln/detail/CVE-2022-22846
• https://github.com/paulc/dnslib/issues/30
• https://github.com/paulc/dnslib/commit/76e8677699ed098387d502c57980f58da642aeba
• https://github.com/advisories/GHSA-r478-c2pc-m7gx
• https://github.com/paulc/dnslib
• https://github.com/pypa/advisory-database/tree/main/vulns/dnslib/PYSEC-2022-4.yaml

CVE-2022-22846 · published 2022-01-12T20:07:10Z · modified 2024-09-18T20:25:01.257498Z · JSON