In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-twisted | Aug 22, 2024 | Mar 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-twisted-web | May 22, 2020 | Mar 12, 2020 |
| Amazon_linux | — | Upgrade python-twisted-web | Jun 4, 2020 | Mar 12, 2020 |
| Centos_linux | — | Upgrade python-twisted-web | Apr 24, 2020 | Mar 12, 2020 |
| Debian | — | Upgrade twisted | Mar 19, 2020 | Mar 12, 2020 |
| Freebsd | — | Upgrade py36-twistedUpgrade py38-twistedUpgrade py27-twistedUpgrade py37-twistedUpgrade py35-twisted | Apr 22, 2020 | Apr 21, 2020 |
| Gentoo Linux | — | Upgrade dev-python/twisted. | Jul 28, 2020 | Mar 12, 2020 |
| Oracle Solaris | — | Upgrade library/python/python-twisted-27 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade library/python/python-twisted to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade library/python/python-twisted-37 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade legacy/library/python/python-twisted-34 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade legacy/library/python/python-twisted-35 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Mar 12, 2020 |
| Oracle_linux | — | Upgrade ol-automation-manager-cliUpgrade python-twisted-webUpgrade python3-olamkitUpgrade ol-automation-manager | Apr 30, 2020 | Mar 11, 2020 |
| Redhat_linux | — | Upgrade python-twisted-web | Apr 24, 2020 | Mar 12, 2020 |
| Suse | — | Upgrade python-twisted | Aug 9, 2024 | Mar 12, 2020 |
| Ubuntu | — | Upgrade python3-twistedUpgrade python-twistedUpgrade python-twisted-binUpgrade python-twisted-web (Ubuntu Pro)Upgrade python-twisted (Ubuntu Pro)Upgrade python-twisted-bin (Ubuntu Pro)Upgrade python3-twisted-binUpgrade python-twisted-web | Mar 20, 2020 | Mar 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 12, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub