vulnerability

Ubuntu: (Multiple Advisories) (CVE-2019-12855): Twisted vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
6	(AV:N/AC:M/Au:N/C:P/I:P/A:N)	Jun 16, 2019	Mar 20, 2020	Mar 27, 2026

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:N)

Published

Jun 16, 2019

Added

Mar 20, 2020

Modified

Mar 27, 2026

Description

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.

Solutions

ubuntu-pro-upgrade-python-twistedubuntu-pro-upgrade-python-twisted-binubuntu-pro-upgrade-python-twisted-webubuntu-pro-upgrade-python3-twistedubuntu-pro-upgrade-python3-twisted-bin

References

CVE-2019-12855
https://attackerkb.com/topics/CVE-2019-12855
CWE-295
EUVD-EUVD-2019-0147
NVD-CVE-2019-12855
UBUNTU-USN-4308-1
UBUNTU-USN-4308-2
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-0147

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today