CWE-292 DEPRECATED: Trusting Self-reported DNS Name

variant

This entry has been deprecated because it was a duplicate of CWE-350. All content has been transferred to CWE-350.

01

vulnerabilities (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-29483US——
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP a…
02

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan