CVE-2026-42304: Twisted Dns Decompression Loop
DNS decompression parses pointer lengths via offset tracking but lacks loop detection. This allows remote attackers to trigger an infinite loop using deeply chained or cyclic compression pointers, causing a Denial of Service (DoS). Ensure offset references are tracked in a set and reject duplicates.
Pythongreprules fetch cve-2026-42304-twisted-dns-decompression-loop --engine opengrepDescription
DNS decompression parses pointer lengths via offset tracking but lacks loop detection. This allows remote attackers to trigger an infinite loop using deeply chained or cyclic compression pointers, causing a Denial of Service (DoS). Ensure offset references are tracked in a set and reject duplicates.
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.