-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| eventlet | pip | < 0.35.2 | 0.35.2 |
| dnspython | pip | < 2.6.1 | 2.6.1 |
Miggo AIRoot Cause AnalysisThe vulnerability manifests in the UDP packet handling logic of both libraries. In eventlet's greendns.py, the udp function was modified to add 'ignore_errors' parameter and exception handling changes. In dnspython, both query.py and asyncquery.py received critical error handling updates for Truncated exceptions. The core issue was premature termination of DNS resolution when receiving invalid packets from the expected source IP/port, rather than continuing to wait for valid responses throughout the full timeout window. The patch diffs and commit messages explicitly show these functions were modified to add proper error continuation logic.
PythonPythonOngoing coverage of React2Shell