CVE-2023-29483 Potential DoS via the Tudoor mechanism in eventlet and dnspython
Remote attackers can disrupt DNS resolution in dnspython by sending invalid packets, causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-29483?
CVE-2023-29483 is a high-severity vulnerability in Fedoraproject Fedora, published on 11 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.
Weakness: CWE-292
Which versions are affected by CVE-2023-29483?
6 open source packages ship an affected version, including dnspython and eventlet. It affects 4 products.
| Package | Affected | Fixed in |
|---|---|---|
dnspython PyPI | All versions | 2.6.1 |
dnspython PyPI | All versions | 2.6.1 |
dnspython PyPI | All versions | 2.6.1 |
eventlet PyPI | All versions | 0.35.2 |
eventlet PyPI | All versions | 0.35.2 |
eventlet PyPI | All versions | 0.35.2 |
Linux distribution packages (34)
python3-dns AlmaLinux:8 | All versions | 1.15.0-12.el8_10 |
python3-dns AlmaLinux:9 | All versions | 2.6.1-3.el9 |
python-dns Red Hat:enterprise_linux:8::baseos | All versions | 0:1.15.0-12.el8_10 |
python3-dns Red Hat:enterprise_linux:8::baseos | All versions | 0:1.15.0-12.el8_10 |
python-dns Red Hat:enterprise_linux:9::baseos | All versions | 0:2.6.1-3.el9 |
python3-dns Red Hat:enterprise_linux:9::baseos | All versions | 0:2.6.1-3.el9 |
python-dns Rocky Linux:8 | All versions | 0:1.15.0-12.el8_10 |
python-dns Rocky Linux:9 | All versions | 0:2.6.1-3.el9 |
python-dnspython SUSE:Enterprise Storage 7.1 | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise Micro 5.3 | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise Micro 5.3 | All versions | 1.15.0-150000.3.5.1 |
python-dnspython SUSE:Linux Enterprise Micro 5.4 | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise Micro 5.4 | All versions | 1.15.0-150000.3.5.1 |
python-dnspython SUSE:Linux Enterprise Micro 5.5 | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise Micro 5.5 | All versions | 1.15.0-150000.3.5.1 |
python-dnspython SUSE:Linux Enterprise Module for Basesystem 15 SP5 | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise Module for Basesystem 15 SP5 | All versions | 1.15.0-150000.3.5.1 |
python-dnspython SUSE:Linux Enterprise Module for Basesystem 15 SP6 | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise Module for Basesystem 15 SP6 | All versions | 1.15.0-150000.3.5.1 |
python-dnspython SUSE:Linux Enterprise Module for Package Hub 15 SP5 | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise Module for Package Hub 15 SP5 | All versions | 1.15.0-150000.3.5.1 |
python-dnspython SUSE:Linux Enterprise Module for Package Hub 15 SP6 | All versions | 1.15.0-150000.3.10.2 |
python-dnspython SUSE:Linux Enterprise Module for Package Hub 15 SP6 | All versions | 1.15.0-150000.3.5.1 |
python-dnspython SUSE:Linux Enterprise Module for Public Cloud 12 | All versions | 1.12.0-9.13.1 |
python-dnspython SUSE:Linux Enterprise Module for Public Cloud 12 | All versions | 1.12.0-9.16.2 |
python-google-api-core SUSE:Linux Enterprise Module for Public Cloud 15 SP4 | All versions | 2.28.0-150400.5.9.2 |
python-google-auth SUSE:Linux Enterprise Module for Public Cloud 15 SP4 | All versions | 2.47.0-150400.6.12.2 |
python-google-cloud-appengine-logging SUSE:Linux Enterprise Module for Public Cloud 15 SP4 | All versions | 1.8.0-150400.9.8.2 |
python-google-cloud-artifact-registry SUSE:Linux Enterprise Module for Public Cloud 15 SP4 | All versions | 1.19.0-150400.9.8.2 |
python-google-cloud-audit-log SUSE:Linux Enterprise Module for Public Cloud 15 SP4 | All versions | 0.4.0-150400.9.8.1 |
Products include Dnspython Dnspython, Eventlet Eventlet, Fedoraproject Fedora, Netapp Bootstrap Os.
How do I fix CVE-2023-29483?
Upgrade dnspython to 2.6.1 or later.
Is CVE-2023-29483 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-29483 exists.
Sources
Also known as ALSA-2024:3275, ALSA-2024:9423, CLSA-2026-1787147369, DEBIAN-CVE-2023-29483, ECHO-019a-f9a1-1d0d, GHSA-3rq5-2g8h-59hc and 21 more.