850 matches found
SUSE SLES12 Security Update : python-Twisted (SUSE-SU-2019:2066-1)
This update for python-Twisted fixes the following issue : Security issue fixed : CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825. Note that Tenable Network Security has extracted the preceding description block...
Fedora 29 : python-twisted (2019-b67877d7c2)
Fix CVE-2019-12387 rhbz1719503 rhbz1719501 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenab...
SUSE-SU-2019:2066-1 Security update for python-Twisted
This update for python-Twisted fixes the following issue: Security issue fixed: - CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825...
[SECURITY] Fedora 30 Update: matrix-synapse-1.2.1-1.fc30
Matrix is an ambitious new ecosystem for open federated Instant Messaging a nd VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is inten ded to showcase the concept of Matrix and let folks see the spec i...
Fedora Update for matrix-synapse FEDORA-2019-80f1943143
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : python-Twisted (openSUSE-2019-1760)
This update for python-Twisted fixes the following issue : Security issue fixed: - CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825. This update was imported from the SUSE:SLE-15:Update update project. C Tenable...
openSUSE: Security Advisory for python-Twisted (openSUSE-SU-2019:1760-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2019:1785-1 Security update for python-Twisted
This update for python-Twisted fixes the following issue: Security issue fixed: - CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825. This update was imported from the SUSE:SLE-15:Update update project. This update...
OPENSUSE-SU-2019:1760-1 Security update for python-Twisted
This update for python-Twisted fixes the following issue: Security issue fixed: - CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825. This update was imported from the SUSE:SLE-15:Update update project...
Security update for python-Twisted (moderate)
openSUSE Security Update: Security update for python-Twisted Announcement ID: openSUSE-SU-2019:1760-1 Rating: moderate References: 1137825 Cross-References: CVE-2019-12387 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description...
Security update for python-Twisted (moderate)
openSUSE Security Update: Security update for python-Twisted Announcement ID: openSUSE-SU-2019:1785-1 Rating: moderate References: 1137825 Cross-References: CVE-2019-12387 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description: This updat...
The vulnerability of the twisted.web network framework’s Twisted component allows attackers to compromise the confidentiality and integrity of protected information.
The vulnerability of the twisted.web network framework exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of protected information by introducing invalid characters like CRLF...
SUSE SLED15 / SLES15 Security Update : python-Twisted (SUSE-SU-2019:1731-1)
This update for python-Twisted fixes the following issue : Security issue fixed : CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825. Note that Tenable Network Security has extracted the preceding description block...
SUSE-SU-2019:1731-1 Security update for python-Twisted
This update for python-Twisted fixes the following issue: Security issue fixed: - CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825...
The vulnerability of the manhole utility in the python-twisted-core package, which allows a intruder to cause a service failure
The vulnerability of the manhole utility in the python-twisted-core package is related to buffer overflow errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted script...
Man-in-the-Middle (MitM)
twisted is vulnerable to man-in-the-middle attacks. XMPP does not verify server certificates when used with TLS. This allows a remote attacker to perform man-in-the-middle attacks on connections between the client and the server...
PYSEC-2019-129
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...
CVE-2019-12855
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...
AZL-6818 CVE-2019-12855 affecting package python-twisted for versions less than 22.2.0-1
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...
