PyPI/eventlet CVE-2023-29483: medium 5.9, EPSS 1.86%
Potential DoS via the Tudoor mechanism in eventlet and dnspython
Action: Upgrade eventlet to 0.35.2 or later.
pip install eventlet==0.35.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.35.2 | - |
Fixed versions
| 0.35.2 |
Sources
- osv: PYSEC-2026-2472
- https://nvd.nist.gov/vuln/detail/CVE-2023-29483
- https://github.com/eventlet/eventlet/issues/913
- https://github.com/rthalley/dnspython/issues/1045
- https://github.com/eventlet/eventlet/commit/51e3c4928d4938beb576eff34f3bf97e6e64e6b4
- https://github.com/rthalley/dnspython/commit/0ea5ad0a4583e1f519b9bcc67cfac381230d9cf2
- https://github.com/eventlet/eventlet
- https://github.com/eventlet/eventlet/releases/tag/v0.35.2
- https://github.com/rthalley/dnspython/releases/tag/v2.6.0
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLRKR57IFVKQC2GCXZBFLCLBAWBWL3F6
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOHJOO3OM65UIUUUVDEXMCTXNM6LXZEH
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3BNSIK5NFYSAP53Y45GOCMOQHHDLGIF
- https://security.netapp.com/advisory/ntap-20240510-0001
- https://security.snyk.io/vuln/SNYK-PYTHON-DNSPYTHON-6241713
- https://www.dnspython.org
- https://pypi.org/project/eventlet
- https://github.com/advisories/GHSA-3rq5-2g8h-59hc
CVE-2023-29483 · published · modified · JSON