# CVE-2024-41671: twisted: Twisted is an event-based framework for internet applications, supporting Python 3.6+ CVE-2024-41671 is fixed in 16 products on 1 platform, first by python-twisted 17.9.0-2ubuntu0.3+esm2, released July 29, 2024. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2024-41671 - Priority: High - CVSS: 8.3 (high) - EPSS: 0.0086 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jul 29, 2024 ## Description Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | python-Twisted opensuse-leap 15.6 | 22.10.0-150400.5.23.1 | [SUSE-SU-2024:2880-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2880-1.md) | Aug 12, 2024 | | Linux | python-Twisted sles 15.6 | 22.10.0-150400.5.23.1 | [SUSE-SU-2024:2880-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2880-1.md) | Aug 12, 2024 | | Linux | python-twisted Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm2 | [python-twisted 17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python-twisted-bin Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm2 | [python-twisted-bin 17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-bin-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python-twisted-conch Ubuntu 18.04.6 LTS (bionic) | 1:17.9.0-2ubuntu0.3+esm2 | [python-twisted-conch 1:17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-conch-1-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python-twisted-core Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm2 | [python-twisted-core 17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-core-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python-twisted-mail Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm2 | [python-twisted-mail 17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-mail-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python-twisted-names Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm2 | [python-twisted-names 17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-names-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python-twisted-news Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm2 | [python-twisted-news 17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-news-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python-twisted-runner Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm2 | [python-twisted-runner 17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-runner-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python-twisted-web Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm2 | [python-twisted-web 17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-web-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python-twisted-words Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm2 | [python-twisted-words 17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-words-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python3-Twisted sles 15.6 | 22.2.0-150400.21.1 | [SUSE-SU-2024:2860-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2860-1.md) | Aug 9, 2024 | | Linux | python3-twisted Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm2 | [python3-twisted 17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3-twisted-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python3-twisted Ubuntu 20.04 LTS (focal) | 18.9.0-11ubuntu0.20.04.5 | [python3-twisted 18.9.0-11ubuntu0.20.04.5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-twisted-18.9.0-11ubuntu0.20.04.5.md) | Jul 29, 2024 | | Linux | python3-twisted Ubuntu 22.04.1 LTS (jammy) | 22.1.0-2ubuntu2.6 | [python3-twisted 22.1.0-2ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-twisted-22.1.0-2ubuntu2.6.md) | Jul 29, 2024 | | Linux | python3-twisted Ubuntu 24.04.5 LTS (noble) | 24.3.0-1ubuntu0.1 | [python3-twisted 24.3.0-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-python3-twisted-24.3.0-1ubuntu0.1.md) | Jul 29, 2024 | | Linux | python3-twisted amzn 2023 | 22.4.0-128.amzn2023.0.5 | [ALAS2023-2025-903](https://patchblox.com/security/data/fix/linux/alas2023-2025-903.md) | Mar 13, 2025 | | Linux | python3-twisted+tls amzn 2023 | 22.4.0-128.amzn2023.0.5 | [ALAS2023-2025-903](https://patchblox.com/security/data/fix/linux/alas2023-2025-903.md) | Mar 13, 2025 | | Linux | python3-twisted-bin Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm2 | [python3-twisted-bin 17.9.0-2ubuntu0.3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3-twisted-bin-17.9.0-2ubuntu0.3-esm2.md) | Jul 29, 2024 | | Linux | python3-twisted-bin Ubuntu 20.04 LTS (focal) | 18.9.0-11ubuntu0.20.04.5 | [python3-twisted-bin 18.9.0-11ubuntu0.20.04.5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-twisted-bin-18.9.0-11ubuntu0.20.04.5.md) | Jul 29, 2024 | | Linux | twisted Debian 12.15 (bookworm) | 22.4.0-4+deb12u1 | [DEBIAN-CVE-2024-41671](https://patchblox.com/security/data/fix/linux/debian-cve-2024-41671.md) | Jul 29, 2024 | | Linux | twisted Debian 13.5 (trixie) | 24.7.0-1 | [DEBIAN-CVE-2024-41671](https://patchblox.com/security/data/fix/linux/debian-cve-2024-41671.md) | Jul 29, 2024 | | Linux | twisted Debian 14 | 24.7.0-1 | [DEBIAN-CVE-2024-41671](https://patchblox.com/security/data/fix/linux/debian-cve-2024-41671.md) | Jul 29, 2024 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.