18 matches found
SUSE CVE-2026-115776
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes received without a line feed in its per-connection buffer and applies no maximum line length. The twisted.words.service.IRCUse...
Linux Distros Unpatched Vulnerability : CVE-2026-115776
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains...
CVE-2026-115776
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes received without a line feed in its per-connection buffer and applies no maximum line length. The twisted.words.service.IRCUse...
CVE-2026-115776
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes received without a line feed in its per-connection buffer and applies no maximum line length. The twisted.words.service.IRCUse...
Allocation of Resources Without Limits or Throttling
Overview Twisted is an event-based network programming and multi-protocol integration framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via twisted.conch.telnet.Telnet.dataReceived when processing a telnet subnegotiation that is...
EUVD-2026-109150
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes received without a line feed in its per-connection buffer and applies no maximum line length. The twisted.words.service.IRCUse...
CVE-2026-115776
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes received without a line feed in its per-connection buffer and applies no maximum line length. The twisted.words.service.IRCUse...
CVE-2026-115776 Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes received without a line feed in its per-connection buffer and applies no maximum line length. The twisted.words.service.IRCUse...
CVE-2026-115776
The Twisted framework (Python 3.6+) is vulnerable to an unauthenticated Remote Denial of Service (DoS) in its IRC server. Specifically, the twisted.words.protocols.irc.IRC.dataReceived method retains bytes received without a line feed in a per-connection buffer without enforcing a maximum line le...
PT-2026-122220
Name of the Vulnerable Software and Affected Versions Twisted versions prior to 26.10.0rc1 Description An unbounded-buffer issue exists in the Twisted words IRC server where the dataReceived function in twisted.words.protocols.irc.IRC appends all received bytes to a per-connection buffer without...
Twisted Matrix Labs Twisted resource management error vulnerability
Versions of Twisted Matrix Labs Twisted prior to 26.10.0rc1 contain a resource management error vulnerability. This vulnerability arises because twisted.conch.telnet.Telnet.dataReceived appends each byte received after an IAC SB to the persistent sub-negotiation buffer until an IAC SE is received...
PT-2026-122417
Summary An unbounded-buffer vulnerability CWE-770 in the Twisted words IRC server lets any unauthenticated remote client exhaust server memory. twisted.words.protocols.irc.IRC.dataReceived appends every received byte to a per-connection buffer and only removes data at a line feed, with no maximum...
GHSA-H7WM-PH43-C39P Scrapy denial of service vulnerability
Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...
CVE-2022-21716
An uncontrolled resource consumption flaw was found in python-twisted in the dataReceived function. This flaw allows an unauthenticated, remote attacker to send a simple command to use all available memory and crash the server...
CVE-2017-14158
Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...
CVE-2017-14158
Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...
CVE-2017-14158
Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...
CVE-2017-14158: Uncontrolled Resource Consumption
Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...