273 matches found
Scientific Linux Security Update : python-twisted-web on SL7.x x86_64 (20200407)
python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135832; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...
CentOS 7 : python-twisted-web (RHSA-2020:1091)
The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1091 advisory. - In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...
RHEL 7 : python-twisted-web (RHSA-2020:1091)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1091 advisory. Twisted is an event-based framework for internet applications. Twisted Web is a complete web server, aimed at hosting web applications using Twisted...
[SECURITY] Fedora 31 Update: python-twisted-19.2.1-6.fc31
Twisted is a networking engine written in Python, supporting numerous proto cols. It contains a web server, numerous chat clients, chat servers, mail servers and more...
Fedora 31 : python-twisted (2020-16dc0da400)
Security fix for CVE-2020-10108 1813439, 1813441 Security fix for CVE-2020-10109 1813447, 1813449 ---- Own %pythonXsitelib/twisted/plugins Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
[SECURITY] Fedora 32 Update: python-twisted-19.10.0-2.fc32
Twisted is a networking engine written in Python, supporting numerous proto cols. It contains a web server, numerous chat clients, chat servers, mail servers and more...
CVE-2020-10109
A flaw was found in python-twisted-web, where it does not correctly process HTTP requests with both Content-Length and Transfer-Encoding headers. When the requests sent from and to the python-twisted-web are processed by another component that correctly processes HTTP requests, for example, a...
CVE-2020-10108
A flaw was found in python-twisted-web, where it does not correctly process HTTP requests, accepting requests with more than one Content-Length header. When the requests sent from and to the python-twisted-web are processed by another component that correctly processes HTTP requests, for example,...
AZL-6819 CVE-2020-10108 affecting package python-twisted for versions less than 22.2.0-1
In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request...
GHSA-3C45-WGJP-7V9R Python Twisted trustRoot is not respected in HTTP client
Python Twisted 14.0.0 trustRoot is not respected in HTTP client...
MGASA-2019-0360 Updated python-twisted packages fix security vulnerabilities
Updated python-twisted packages fix security vulnerabilities: Improper sanitization of URIs or HTTP which could allow attackers to perform CRLF attacks CVE-2019-12387. In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS,...
Updated python-twisted packages fix security vulnerabilities
Updated python-twisted packages fix security vulnerabilities: Improper sanitization of URIs or HTTP which could allow attackers to perform CRLF attacks CVE-2019-12387. In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS,...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
DEBIAN-CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
UBUNTU-CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
Design/Logic Flaw
Python Twisted 14.0 trustRoot is not respected in HTTP client...
