CVE-2022-22846

5.3 mediumEPSS 0.8%

Medium (5.3) in dnslib project dnslib. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in dnslib 0.9.17.

The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query.

Severity

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
Published: 2022-01-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-r478-c2pc-m7gx	PyPI	dnslib	<0.9.17	0.9.17
PYSEC-2022-4	PyPI	dnslib	<0.9.17	0.9.17