Skip to content
Threat Feed

Vendor

Twisted

1 brief RSS
medium advisory

Twisted DNS Server Denial of Service via Crafted Compression Pointers

A denial-of-service vulnerability exists in the twisted.names module, where an unauthenticated attacker can send a crafted TCP DNS packet with deeply chained compression pointers, causing the Twisted reactor to hang while processing recursive lookups and effectively freezing the server.

Twisted denial-of-service dns
2r 1t