A flaw was found in Twisted. This vulnerability allows a network attacker to spoof Domain Name System (DNS) responses and redirect network traffic. The DNS protocol implementation accepts incoming User Datagram Protocol (UDP) responses that match a pending query transaction identifier without validating that the packet originated from the queried server address and port. By delivering a packet with the correct transaction identifier to the listening resolver, an attacker can inject forged answers and manipulate hostname resolution.