{
  "cveId": "CVE-2023-46137",
  "url": "https://patchblox.com/security/cve/CVE-2023-46137",
  "summary": "CVE-2023-46137 is fixed in 4 products on 1 platform, first by python3-twisted 18.9.0-11ubuntu0.20.04.3, released October 25, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "python3-twisted: Twisted is an event-based framework for internet applications",
  "description": "Twisted is an event-based framework for internet applications. Prior toversion 23.10.0rc1, when sending multiple HTTP requests in one TCP packet,twisted.web will process the requests asynchronously without guaranteeingthe response order. If one of the endpoints is controlled by an attacker,the attacker can delay the response on purpose to manipulate the responseof the second request when a victim launched two requests using HTTPpipeline. Version 23.10.0rc1 contains a patch for this issue.",
  "published": "2023-10-25T14:15:00Z",
  "severity": "Medium",
  "cvss": 5.3,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "epss": 0.00879,
  "epssPercentile": 0.59321,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "python3-twisted",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "18.9.0-11ubuntu0.20.04.3",
      "fix": "python3-twisted 18.9.0-11ubuntu0.20.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-python3-twisted-18.9.0-11ubuntu0.20.04.3",
      "released": "2023-10-25T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-twisted",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "22.1.0-2ubuntu2.4",
      "fix": "python3-twisted 22.1.0-2ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-twisted-22.1.0-2ubuntu2.4",
      "released": "2023-10-25T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-twisted",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "22.4.0-4ubuntu1",
      "fix": "python3-twisted 22.4.0-4ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-python3-twisted-22.4.0-4ubuntu1",
      "released": "2023-10-25T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-twisted",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "22.4.0-4ubuntu1",
      "fix": "python3-twisted 22.4.0-4ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-python3-twisted-22.4.0-4ubuntu1",
      "released": "2026-01-16T01:42:23Z"
    },
    {
      "platform": "linux",
      "product": "python3-twisted",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "22.4.0-4ubuntu1",
      "fix": "python3-twisted 22.4.0-4ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-python3-twisted-22.4.0-4ubuntu1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "python3-twisted",
      "release": "amzn 2023",
      "fixedVersion": "22.4.0-126.amzn2023.0.3",
      "fix": "ALAS2023-2023-432",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-432",
      "released": "2023-11-09T21:29:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-twisted\u002Btls",
      "release": "amzn 2023",
      "fixedVersion": "22.4.0-126.amzn2023.0.3",
      "fix": "ALAS2023-2023-432",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-432",
      "released": "2023-11-09T21:29:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-twisted-bin",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "18.9.0-11ubuntu0.20.04.3",
      "fix": "python3-twisted-bin 18.9.0-11ubuntu0.20.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-python3-twisted-bin-18.9.0-11ubuntu0.20.04.3",
      "released": "2023-10-25T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "twisted",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "22.4.0-4\u002Bdeb12u1",
      "fix": "DSA-5797-1",
      "url": "https://patchblox.com/security/fix/linux/dsa-5797-1",
      "released": "2024-10-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "twisted",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "23.10.0-1",
      "fix": "DEBIAN-CVE-2023-46137",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-46137",
      "released": "2023-10-25T21:15:10Z"
    },
    {
      "platform": "linux",
      "product": "twisted",
      "release": "Debian 14",
      "fixedVersion": "23.10.0-1",
      "fix": "DEBIAN-CVE-2023-46137",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-46137",
      "released": "2023-10-25T21:15:10Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}