Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2020-1561

Опубликовано: 23 апр. 2020
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2020-1561: python-twisted-web security update (IMPORTANT)

[12.1.0-7]

  • Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities Resolves: rhbz#1813439 rhbz#1813447
  • Remove useless macros definitions

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

python-twisted-web

12.1.0-7.el7_8

Oracle Linux x86_64

python-twisted-web

12.1.0-7.el7_8

Связанные CVE

Связанные уязвимости

suse-cvrf
почти 3 года назад

Security update for python-Twisted

CVSS3: 9.8
redos
3 месяца назад

Множественные уязвимости python3-twisted

oracle-oval
около 3 лет назад

ELSA-2022-9341: ol-automation-manager security update (IMPORTANT)

CVSS3: 9.8
ubuntu
больше 5 лет назад

In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request.

CVSS3: 7.3
redhat
больше 5 лет назад

In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request.