CVE-2020-10109
python3-twisted: In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability
CVE-2020-10109 is fixed in 15 products on 1 platform, first by python-twisted 17.9.0-2ubuntu0.1, released March 12, 2020. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
9.8
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0329
88th percentile
In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ol-automation-manager · ol 8 | 0:1.0.2-1.el8 | ELSA-2022-9341 | Apr 27, 2022 |
| ol-automation-manager-cli · ol 8 | 0:1.0.2-1.el8 | ELSA-2022-9341 | Apr 27, 2022 |
| python-twisted · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | python-twisted 17.9.0-2ubuntu0.1 | Mar 12, 2020 |
| python-twisted-bin · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | python-twisted-bin 17.9.0-2ubuntu0.1 | Mar 12, 2020 |
| python-twisted-conch · Ubuntu 18.04.6 LTS (bionic) | 1:17.9.0-2ubuntu0.1 | python-twisted-conch 1:17.9.0-2ubuntu0.1 | Mar 12, 2020 |
| python-twisted-core · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | python-twisted-core 17.9.0-2ubuntu0.1 | Mar 12, 2020 |
| python-twisted-mail · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | python-twisted-mail 17.9.0-2ubuntu0.1 | Mar 12, 2020 |
| python-twisted-names · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | python-twisted-names 17.9.0-2ubuntu0.1 | Mar 12, 2020 |
| python-twisted-news · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | python-twisted-news 17.9.0-2ubuntu0.1 | Mar 12, 2020 |
| python-twisted-runner · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | python-twisted-runner 17.9.0-2ubuntu0.1 | Mar 12, 2020 |
| python-twisted-web · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | python-twisted-web 17.9.0-2ubuntu0.1 | Mar 12, 2020 |
| python-twisted-words · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | python-twisted-words 17.9.0-2ubuntu0.1 | Mar 12, 2020 |
| python3-olamkit · ol 8 | 0:1.0.2-1.el8 | ELSA-2022-9341 | Apr 27, 2022 |
| python3-twisted · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | python3-twisted 17.9.0-2ubuntu0.1 | Mar 12, 2020 |
| python3-twisted-bin · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | python3-twisted-bin 17.9.0-2ubuntu0.1 | Mar 12, 2020 |