Threat database

dnspython versions prior to 2.9.0 contain an uncontrolled recursion vulnerability in the dns.name.from_wire_parser function. This function follows DNS compression pointer chains without a hop limit, allowing a malicious DNS message to cause excessive pointer traversal. This can lead to high CPU usage, application degradation, or denial of service. The issue is fixed in dnspython version 2.9.0.