5 matches found
DSA-5797-1 twisted - security update
Bulletin has no description...
DLA-2938-1 twisted - security update
Bulletin has no description...
PT-2021-7398
Name of the Vulnerable Software and Affected Versions Twisted versions prior to 22.2.0 Description The Twisted SSH client and server implementation is vulnerable to a denial of service attack due to its ability to accept an infinite amount of data for the peer's SSH version identifier, resulting ...
MGASA-2019-0360 Updated python-twisted packages fix security vulnerabilities
Updated python-twisted packages fix security vulnerabilities: Improper sanitization of URIs or HTTP which could allow attackers to perform CRLF attacks CVE-2019-12387. In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS,...
PYSEC-2019-129
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...