Ubuntu 16.04 ESM / 22.04 LTS : Twisted vulnerability (USN-5354-2)

The remote Ubuntu 16.04 ESM / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5354-2 advisory. USN-5354-1 fixed vulnerabilities in Twisted. This update provides the corresponding updates for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 22.04 LT...

Debian: Security Advisory (DLA-2991-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2991-1] twisted security update

Debian LTS Advisory DLA-2991-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera May 03, 2022 https://wiki.debian.org/LTS Package : twisted Version : 16.6.0-2+deb9u3 CVE ID : CVE-2022-24801 Debian Bug : 1009030 The Twisted Web HTTP 1.1 server, located in the...

DLA-2991-1 twisted - security update

Bulletin has no description...

SUSE: Security Advisory (SUSE-SU-2022:1477-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : python-Twisted (SUSE-SU-2022:1477-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:1477-1 advisory. - Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to version 22.4.0rc1, the Twisted Web HTTP 1....

RHEL 8 : Red Hat OpenStack Platform 16.1 (python-twisted) (RHSA-2022:1646)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:1646 advisory. Twisted is a networking engine written in Python, supporting numerous protocols. It contains a web server, numerous chat clients, chat servers, mail...

SUSE-SU-2022:1477-1 Security update for python-Twisted

This update for python-Twisted fixes the following issues: - CVE-2022-24801: Fixed to not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP request smuggling. bsc1198086...

python-twisted: possible http request smuggling

A flaw was found in python-twisted. This vulnerability occurs due to the parsing of illegal constructs in the twisted.web.http module. The illegal constructs include '+/-' in the Content-Length header, '\n and \t' etc. Non-conformant parsing leads to a desync if requests pass through multiple HTT...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (python-twisted) security update

An update for python-twisted is now available for Red Hat OpenStack Platform 16.1 Train. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

python-twisted: possible http request smuggling

A flaw was found in python-twisted. This vulnerability occurs due to the parsing of illegal constructs in the twisted.web.http module. The illegal constructs include '+/-' in the Content-Length header, '\n and \t' etc. Non-conformant parsing leads to a desync if requests pass through multiple HTT...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-twisted) security update

An update for python-twisted is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 : Red Hat OpenStack Platform 16.2 (python-twisted) (RHSA-2022:1645)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:1645 advisory. Twisted is a networking engine written in Python, supporting numerous protocols. It contains a web server, numerous chat clients, chat servers, mail...

Oracle Linux 8 : ol-automation-manager (ELSA-2022-9341)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9341 advisory. 1.0.2-1.el8 - Fix multiple CVEs : CVE-2017-18342, CVE-2020-10109, CVE-2020-10108, CVE-2021-33203, CVE-2021-33571, CVE-2021-44420, CVE-2021-31542,...

HTTP Request Smuggling in twisted.web

...

CVE-2022-21712 affecting package python-twisted for versions less than 22.2.0-1

CVE-2022-21712 affecting package python-twisted for versions less than 22.2.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-10109 affecting package python-twisted for versions less than 22.2.0-1

CVE-2020-10109 affecting package python-twisted for versions less than 22.2.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-12855 affecting package python-twisted for versions less than 22.2.0-1

CVE-2019-12855 affecting package python-twisted for versions less than 22.2.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-10108 affecting package python-twisted for versions less than 22.2.0-1

CVE-2020-10108 affecting package python-twisted for versions less than 22.2.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-24801

A flaw was found in python-twisted. This vulnerability occurs due to the parsing of illegal constructs in the twisted.web.http module. The illegal constructs include '+/-' in the Content-Length header, '\n and \t' etc. Non-conformant parsing leads to a desync if requests pass through multiple HTT...