PyPI/dnspython CVE-2023-29483: medium 5.9, EPSS 1.86%

Potential DoS via the Tudoor mechanism in eventlet and dnspython

Action: Upgrade dnspython to 2.6.1 or later.

pip install dnspython==2.6.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1307
• https://nvd.nist.gov/vuln/detail/CVE-2023-29483
• https://github.com/eventlet/eventlet/issues/913
• https://github.com/rthalley/dnspython/issues/1045
• https://github.com/eventlet/eventlet/commit/51e3c4928d4938beb576eff34f3bf97e6e64e6b4
• https://github.com/rthalley/dnspython/commit/0ea5ad0a4583e1f519b9bcc67cfac381230d9cf2
• https://github.com/eventlet/eventlet
• https://github.com/eventlet/eventlet/releases/tag/v0.35.2
• https://github.com/rthalley/dnspython/releases/tag/v2.6.0
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLRKR57IFVKQC2GCXZBFLCLBAWBWL3F6
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOHJOO3OM65UIUUUVDEXMCTXNM6LXZEH
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3BNSIK5NFYSAP53Y45GOCMOQHHDLGIF
• https://security.netapp.com/advisory/ntap-20240510-0001
• https://security.snyk.io/vuln/SNYK-PYTHON-DNSPYTHON-6241713
• https://www.dnspython.org
• https://pypi.org/project/dnspython
• https://github.com/advisories/GHSA-3rq5-2g8h-59hc

CVE-2023-29483 · published 2026-07-07T11:45:38.225602Z · modified 2026-07-13T16:42:52.437776766Z · JSON