Astra Linux – Vulnerability in python-tornado

Tornado is a Python web framework and asynchronous networking library. Versions 6.5.2 and earlier use an inefficient algorithm when parsing parameters for HTTP header values, which may lead to DoS attacks. The parseparam function in httputil.py is used to parse specific HTTP header values, such a...