270 matches found
RHEL 7 : python-twisted-web (RHSA-2020:1091)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1091 advisory. Twisted is an event-based framework for internet applications. Twisted Web is a complete web server, aimed at hosting web applications using Twisted...
[SECURITY] Fedora 31 Update: python-twisted-19.2.1-6.fc31
Twisted is a networking engine written in Python, supporting numerous proto cols. It contains a web server, numerous chat clients, chat servers, mail servers and more...
Fedora 31 : python-twisted (2020-16dc0da400)
Security fix for CVE-2020-10108 1813439, 1813441 Security fix for CVE-2020-10109 1813447, 1813449 ---- Own %pythonXsitelib/twisted/plugins Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
[SECURITY] Fedora 32 Update: python-twisted-19.10.0-2.fc32
Twisted is a networking engine written in Python, supporting numerous proto cols. It contains a web server, numerous chat clients, chat servers, mail servers and more...
CVE-2020-10109
A flaw was found in python-twisted-web, where it does not correctly process HTTP requests with both Content-Length and Transfer-Encoding headers. When the requests sent from and to the python-twisted-web are processed by another component that correctly processes HTTP requests, for example, a...
CVE-2020-10108
A flaw was found in python-twisted-web, where it does not correctly process HTTP requests, accepting requests with more than one Content-Length header. When the requests sent from and to the python-twisted-web are processed by another component that correctly processes HTTP requests, for example,...
AZL-6819 CVE-2020-10108 affecting package python-twisted for versions less than 22.2.0-1
In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request...
GHSA-3C45-WGJP-7V9R Python Twisted trustRoot is not respected in HTTP client
Python Twisted 14.0.0 trustRoot is not respected in HTTP client...
MGASA-2019-0360 Updated python-twisted packages fix security vulnerabilities
Updated python-twisted packages fix security vulnerabilities: Improper sanitization of URIs or HTTP which could allow attackers to perform CRLF attacks CVE-2019-12387. In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS,...
Updated python-twisted packages fix security vulnerabilities
Updated python-twisted packages fix security vulnerabilities: Improper sanitization of URIs or HTTP which could allow attackers to perform CRLF attacks CVE-2019-12387. In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS,...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
DEBIAN-CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
Design/Logic Flaw
Python Twisted 14.0 trustRoot is not respected in HTTP client...
UBUNTU-CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
PYSEC-2019-212
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
CVE-2014-7143 relates to Python Twisted 14.0 where the HTTP client does not respect trustRoot. Connected documents consistently describe this flaw as related to trustRoot not being respected in the Twisted 14.0 HTTP client. The available material does not provide explicit affected versions beyond...
