CWE-292: Trusting Self-reported DNS Name
Filter
deprecated by MITRE
This entry has been deprecated because it was a duplicate of CWE-350. All content has been transferred to CWE-350.
What the weakness is: CWE-292 at MITRE. All weaknesses
Ask an AI about CWE-292
Show the prompt
Explain CWE-292: Trusting Self-reported DNS Name and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/292.html and https://cve.bz/cve/cwe/292?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.0CVE-2023-29483EPSS 1.9%
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other wor…