CVE-2026-114605

A flaw was found in dnspython. A remote attacker can cause a Denial of Service (DoS) by sending a specially crafted Domain Name System (DNS) message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed messages leads to excessive CPU utilization and application unresponsiveness.

This vulnerability is rated as an Important impact because an unauthenticated remote attacker can trigger complete CPU exhaustion and application unresponsiveness without requiring specialized access or privileges. In Red Hat enterprise deployments, the library is embedded across multiple platform services and containerized environments that process network records. Systems are primarily vulnerable when applications accept and decompress wire-format responses from untrusted external name servers.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.