264 matches found
[SECURITY] Fedora 32 Update: python-twisted-19.10.0-2.fc32
Twisted is a networking engine written in Python, supporting numerous proto cols. It contains a web server, numerous chat clients, chat servers, mail servers and more...
CVE-2020-10109
A flaw was found in python-twisted-web, where it does not correctly process HTTP requests with both Content-Length and Transfer-Encoding headers. When the requests sent from and to the python-twisted-web are processed by another component that correctly processes HTTP requests, for example, a...
CVE-2020-10108
A flaw was found in python-twisted-web, where it does not correctly process HTTP requests, accepting requests with more than one Content-Length header. When the requests sent from and to the python-twisted-web are processed by another component that correctly processes HTTP requests, for example,...
AZL-6819 CVE-2020-10108 affecting package python-twisted for versions less than 22.2.0-1
In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request...
GHSA-3C45-WGJP-7V9R Python Twisted trustRoot is not respected in HTTP client
Python Twisted 14.0.0 trustRoot is not respected in HTTP client...
MGASA-2019-0360 Updated python-twisted packages fix security vulnerabilities
Updated python-twisted packages fix security vulnerabilities: Improper sanitization of URIs or HTTP which could allow attackers to perform CRLF attacks CVE-2019-12387. In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS,...
Updated python-twisted packages fix security vulnerabilities
Updated python-twisted packages fix security vulnerabilities: Improper sanitization of URIs or HTTP which could allow attackers to perform CRLF attacks CVE-2019-12387. In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS,...
DEBIAN-CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
Design/Logic Flaw
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
UBUNTU-CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
PYSEC-2019-212
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
CVE-2014-7143 relates to Python Twisted 14.0 where the HTTP client does not respect trustRoot. Connected documents consistently describe this flaw as related to trustRoot not being respected in the Twisted 14.0 HTTP client. The available material does not provide explicit affected versions beyond...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
PT-2019-7137 · Python · Python Twisted
Name of the Vulnerable Software and Affected Versions: Python Twisted version 14.0 Description: The issue concerns the trustRoot in the HTTP client of Python Twisted, which is not respected. This means that the trust root, which is supposed to define the trusted certificate authorities, is not...
SUSE SLES12 Security Update : python-Twisted (SUSE-SU-2019:2453-1)
This update for python-Twisted fixes the following issues : Security issue fixed : CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks bsc1138461. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...
SUSE-SU-2019:2453-1 Security update for python-Twisted
This update for python-Twisted fixes the following issues: Security issue fixed: - CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks bsc1138461...