CVE catalog

CVE-2024-41671

Twisted vulnerabilities

[CVE catalog]

Severity
High · CVSS 8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.86% · Oct 25, 2026

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiantwistedsid26.4.0-6fixed
Debiantwistedforky26.4.0-6fixed
Debiantwistedtrixie24.11.0-1fixed
Debiantwistedbookworm22.4.0-4+deb12u1fixed
Debiantwistedbookworm-security22.4.0-4+deb12u1fixed
Ubuntutwistednoble24.3.0-1ubuntu0.1fixed
Ubuntupython3-twistednoble24.3.0-1ubuntu0.1fixed
Ubuntutwisted-docnoble24.3.0-1ubuntu0.1fixed
PyPItwistedNot reported24.7.0rc1fixed
Ubuntutwistedpro16.6.0-2ubuntu3vulnerable
Ubuntutwistedpro17.9.0-1vulnerable
Ubuntutwistedpro17.9.0-2vulnerable
Ubuntutwistedpro17.9.0-2ubuntu0.1vulnerable
Ubuntutwistedpro17.9.0-2ubuntu0.3vulnerable
Ubuntutwistedpro17.9.0-2ubuntu0.3+esm1fixed
Ubuntutwisted20.0418.9.0-3ubuntu1vulnerable
Ubuntutwisted20.0418.9.0-5vulnerable
Ubuntutwisted20.0418.9.0-6vulnerable
Ubuntutwisted20.0418.9.0-6build1vulnerable
Ubuntutwisted20.0418.9.0-6ubuntu1vulnerable
Ubuntutwisted20.0418.9.0-8vulnerable
Ubuntutwisted20.0418.9.0-11vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.1vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.2vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.3vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.4fixed
Ubuntutwisted22.0420.3.0-7ubuntu1vulnerable
Ubuntutwisted22.0420.3.0-7ubuntu3vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.1vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.3vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.4vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.5fixed
Ubuntutwisted24.0422.4.0-4vulnerable
Ubuntutwisted24.0422.4.0-4ubuntu1vulnerable
Ubuntutwisted24.0423.10.0-2vulnerable
Ubuntutwisted24.0424.3.0-1vulnerable
Ubuntutwisted24.0424.3.0-1ubuntu0.1fixed
Ubuntutwistedpro16.6.0-2ubuntu3vulnerable
Ubuntutwistedpro17.9.0-1vulnerable
Ubuntutwistedpro17.9.0-2vulnerable
Ubuntutwistedpro17.9.0-2ubuntu0.1vulnerable
Ubuntutwistedpro17.9.0-2ubuntu0.3vulnerable
Ubuntutwistedpro17.9.0-2ubuntu0.3+esm1vulnerable
Ubuntutwistedpro17.9.0-2ubuntu0.3+esm2fixed
Ubuntutwisted20.0418.9.0-3ubuntu1vulnerable
Ubuntutwisted20.0418.9.0-5vulnerable
Ubuntutwisted20.0418.9.0-6vulnerable
Ubuntutwisted20.0418.9.0-6build1vulnerable
Ubuntutwisted20.0418.9.0-6ubuntu1vulnerable
Ubuntutwisted20.0418.9.0-8vulnerable
Ubuntutwisted20.0418.9.0-11vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.1vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.2vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.3vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.4vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.5fixed
Ubuntutwisted22.0420.3.0-7ubuntu1vulnerable
Ubuntutwisted22.0420.3.0-7ubuntu3vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.1vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.3vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.4vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.5vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.6fixed
Opensusepython-Twistedtumbleweed24.3.0-2.1fixed
Ubuntutwistedpro16.6.0-2ubuntu3vulnerable
Ubuntutwistedpro17.9.0-1vulnerable
Ubuntutwistedpro17.9.0-2vulnerable
Ubuntutwistedpro17.9.0-2ubuntu0.1vulnerable
Ubuntutwistedpro17.9.0-2ubuntu0.3vulnerable
Ubuntutwistedpro17.9.0-2ubuntu0.3+esm1vulnerable
Ubuntutwistedpro17.9.0-2ubuntu0.3+esm2fixed
Ubuntutwisted20.0418.9.0-3ubuntu1vulnerable
Ubuntutwisted20.0418.9.0-5vulnerable
Ubuntutwisted20.0418.9.0-6vulnerable
Ubuntutwisted20.0418.9.0-6build1vulnerable
Ubuntutwisted20.0418.9.0-6ubuntu1vulnerable
Ubuntutwisted20.0418.9.0-8vulnerable
Ubuntutwisted20.0418.9.0-11vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.1vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.2vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.3vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.4vulnerable
Ubuntutwisted20.0418.9.0-11ubuntu0.20.04.5fixed
Ubuntutwisted22.0420.3.0-7ubuntu1vulnerable
Ubuntutwisted22.0420.3.0-7ubuntu3vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.1vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.3vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.4vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.5vulnerable
Ubuntutwisted22.0422.1.0-2ubuntu2.6fixed
Ubuntutwisted24.0422.4.0-4vulnerable
Ubuntutwisted24.0422.4.0-4ubuntu1vulnerable
Ubuntutwisted24.0423.10.0-2vulnerable
Ubuntutwisted24.0424.3.0-1vulnerable
Ubuntutwisted24.0424.3.0-1ubuntu0.1fixed
Susepython-Twistedlinux enterprise module for public cloud 15 sp422.10.0-150400.5.23.1fixed
Susepython-Twistedlinux enterprise module for python 3 15 sp522.10.0-150400.5.23.1fixed
Susepython-Twistedlinux enterprise module for python 3 15 sp622.10.0-150400.5.23.1fixed
Susepython-Twistedlinux enterprise high performance computing 15 sp4-espos22.10.0-150400.5.23.1fixed
Susepython-Twistedlinux enterprise high performance computing 15 sp4-ltss22.10.0-150400.5.23.1fixed
Susepython-Twistedlinux enterprise server 15 sp4-ltss22.10.0-150400.5.23.1fixed
Susepython-Twistedlinux enterprise server for sap applications 15 sp422.10.0-150400.5.23.1fixed
Opensusepython-Twistedleap 15.522.10.0-150400.5.23.1fixed
Opensusepython-Twistedleap 15.622.10.0-150400.5.23.1fixed
Opensusematrix-synapsetumbleweed1.112.0-1.1fixed
Susepython-Twistedlinux enterprise module for web and scripting 1215.2.1-9.26.1fixed
Susepython-Twistedlinux enterprise high performance computing 15 sp2-ltss19.10.0-150200.3.24.1fixed
Susepython-Twistedlinux enterprise high performance computing 15 sp3-ltss19.10.0-150200.3.24.1fixed
Susepython-Twistedlinux enterprise server 15 sp2-ltss19.10.0-150200.3.24.1fixed
Susepython-Twistedlinux enterprise server 15 sp3-ltss19.10.0-150200.3.24.1fixed
Susepython-Twistedlinux enterprise server for sap applications 15 sp219.10.0-150200.3.24.1fixed
Susepython-Twistedlinux enterprise server for sap applications 15 sp319.10.0-150200.3.24.1fixed
Susepython-Twistedenterprise storage 7.119.10.0-150200.3.24.1fixed
Susepython3-Twistedlinux enterprise module for server applications 15 sp522.2.0-150400.21.1fixed
Susepython3-Twistedlinux enterprise module for server applications 15 sp622.2.0-150400.21.1fixed
Susepython3-Twistedlinux enterprise high performance computing 15 sp4-espos22.2.0-150400.21.1fixed
Susepython3-Twistedlinux enterprise high performance computing 15 sp4-ltss22.2.0-150400.21.1fixed
Susepython3-Twistedlinux enterprise server 15 sp4-ltss22.2.0-150400.21.1fixed
Susepython3-Twistedlinux enterprise server for sap applications 15 sp422.2.0-150400.21.1fixed
Susepython3-Twistedmanager proxy 4.322.2.0-150400.21.1fixed
Susepython3-Twistedmanager server 4.322.2.0-150400.21.1fixed
Opensusepython3-Twistedleap 15.522.2.0-150400.21.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiantwistedsourcesid24.7.0-1not yet assignedNot reported[1077679]
Debiantwistedsourceforky24.7.0-1not yet assignedNot reported[1077679]
Debiantwistedsourcetrixie24.7.0-1not yet assignedNot reported[1077679]
Debiantwistedsourcebookworm22.4.0-4+deb12u1not yet assignedNot reported[1077679]
Ubuntutwisteddebnoble24.3.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntupython3-twisteddebnoble24.3.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntutwisted-docdebnoble24.3.0-1ubuntu0.1Not reportedNot reportedNot reported
PyPItwistedPyPINot reported24.7.0rc1Not reportedPYSEC-2026-1992Not reported
Ubuntutwisteddebpro17.9.0-2ubuntu0.3+esm1Not reportedUSN-6988-1Not reported
Ubuntutwisteddeb20.0418.9.0-11ubuntu0.20.04.4Not reportedUSN-6988-1Not reported
Ubuntutwisteddeb22.0422.1.0-2ubuntu2.5Not reportedUSN-6988-1Not reported
Ubuntutwisteddeb24.0424.3.0-1ubuntu0.1Not reportedUSN-6988-1Not reported
Ubuntutwisteddebpro17.9.0-2ubuntu0.3+esm2Not reportedUSN-6988-2Not reported
Ubuntutwisteddeb20.0418.9.0-11ubuntu0.20.04.5Not reportedUSN-6988-2Not reported
Ubuntutwisteddeb22.0422.1.0-2ubuntu2.6Not reportedUSN-6988-2Not reported
Opensusepython-Twistedrpmtumbleweed24.3.0-2.1Not reportedOPENSUSE-SU-2024:14236-1Not reported
Ubuntutwisteddebpro17.9.0-2ubuntu0.3+esm2Not reportedUBUNTU-CVE-2024-41671Not reported
Ubuntutwisteddeb20.0418.9.0-11ubuntu0.20.04.5Not reportedUBUNTU-CVE-2024-41671Not reported
Ubuntutwisteddeb22.0422.1.0-2ubuntu2.6Not reportedUBUNTU-CVE-2024-41671Not reported
Ubuntutwisteddeb24.0424.3.0-1ubuntu0.1Not reportedUBUNTU-CVE-2024-41671Not reported
Susepython-Twistedrpmlinux enterprise module for public cloud 15 sp422.10.0-150400.5.23.1Not reportedSUSE-SU-2024:2880-1Not reported
Susepython-Twistedrpmlinux enterprise module for python 3 15 sp522.10.0-150400.5.23.1Not reportedSUSE-SU-2024:2880-1Not reported
Susepython-Twistedrpmlinux enterprise module for python 3 15 sp622.10.0-150400.5.23.1Not reportedSUSE-SU-2024:2880-1Not reported
Susepython-Twistedrpmlinux enterprise high performance computing 15 sp4-espos22.10.0-150400.5.23.1Not reportedSUSE-SU-2024:2880-1Not reported
Susepython-Twistedrpmlinux enterprise high performance computing 15 sp4-ltss22.10.0-150400.5.23.1Not reportedSUSE-SU-2024:2880-1Not reported
Susepython-Twistedrpmlinux enterprise server 15 sp4-ltss22.10.0-150400.5.23.1Not reportedSUSE-SU-2024:2880-1Not reported
Susepython-Twistedrpmlinux enterprise server for sap applications 15 sp422.10.0-150400.5.23.1Not reportedSUSE-SU-2024:2880-1Not reported
Opensusepython-Twistedrpmleap 15.522.10.0-150400.5.23.1Not reportedSUSE-SU-2024:2880-1Not reported
Opensusepython-Twistedrpmleap 15.622.10.0-150400.5.23.1Not reportedSUSE-SU-2024:2880-1Not reported
Opensusematrix-synapserpmtumbleweed1.112.0-1.1Not reportedOPENSUSE-SU-2024:14228-1Not reported
Susepython-Twistedrpmlinux enterprise module for web and scripting 1215.2.1-9.26.1Not reportedSUSE-SU-2024:2732-1Not reported
Susepython-Twistedrpmlinux enterprise high performance computing 15 sp2-ltss19.10.0-150200.3.24.1Not reportedSUSE-SU-2024:2757-1Not reported
Susepython-Twistedrpmlinux enterprise high performance computing 15 sp3-ltss19.10.0-150200.3.24.1Not reportedSUSE-SU-2024:2757-1Not reported
Susepython-Twistedrpmlinux enterprise server 15 sp2-ltss19.10.0-150200.3.24.1Not reportedSUSE-SU-2024:2757-1Not reported
Susepython-Twistedrpmlinux enterprise server 15 sp3-ltss19.10.0-150200.3.24.1Not reportedSUSE-SU-2024:2757-1Not reported
Susepython-Twistedrpmlinux enterprise server for sap applications 15 sp219.10.0-150200.3.24.1Not reportedSUSE-SU-2024:2757-1Not reported
Susepython-Twistedrpmlinux enterprise server for sap applications 15 sp319.10.0-150200.3.24.1Not reportedSUSE-SU-2024:2757-1Not reported
Susepython-Twistedrpmenterprise storage 7.119.10.0-150200.3.24.1Not reportedSUSE-SU-2024:2757-1Not reported
Susepython3-Twistedrpmlinux enterprise module for server applications 15 sp522.2.0-150400.21.1Not reportedSUSE-SU-2024:2860-1Not reported
Susepython3-Twistedrpmlinux enterprise module for server applications 15 sp622.2.0-150400.21.1Not reportedSUSE-SU-2024:2860-1Not reported
Susepython3-Twistedrpmlinux enterprise high performance computing 15 sp4-espos22.2.0-150400.21.1Not reportedSUSE-SU-2024:2860-1Not reported
Susepython3-Twistedrpmlinux enterprise high performance computing 15 sp4-ltss22.2.0-150400.21.1Not reportedSUSE-SU-2024:2860-1Not reported
Susepython3-Twistedrpmlinux enterprise server 15 sp4-ltss22.2.0-150400.21.1Not reportedSUSE-SU-2024:2860-1Not reported
Susepython3-Twistedrpmlinux enterprise server for sap applications 15 sp422.2.0-150400.21.1Not reportedSUSE-SU-2024:2860-1Not reported
Susepython3-Twistedrpmmanager proxy 4.322.2.0-150400.21.1Not reportedSUSE-SU-2024:2860-1Not reported
Susepython3-Twistedrpmmanager server 4.322.2.0-150400.21.1Not reportedSUSE-SU-2024:2860-1Not reported
Opensusepython3-Twistedrpmleap 15.522.2.0-150400.21.1Not reportedSUSE-SU-2024:2860-1Not reported

[Debian bug #1077679]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

  • Source package: [python-Twisted]

    Details (1)
    • 26.4.0-3.3 · noarch · tumbleweed

      Unknown · Fixed: 24.3.0-2.1

      Version impact unknown

      usn · python-Twisted · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • Source package: [twisted]

    Details (4)
    • 22.4.0-4+deb12u1 · all · bookworm

      Fixed · Fixed: 22.4.0-4+deb12u1

      usn · twisted · debian · bookworm; usn · twisted · debian · 12

    • 22.4.0-4+deb12u1 · all · bookworm

      Fixed · Fixed: 22.4.0-4+deb12u1

      usn · twisted · debian · bookworm; usn · twisted · debian · 12

    • 22.4.0-4+deb12u1 · all · bookworm-security

      Fixed · Fixed: 22.4.0-4+deb12u1

      usn · twisted · debian · bookworm; usn · twisted · debian · 12

    • 22.4.0-4+deb12u1 · all · bookworm-security

      Fixed · Fixed: 22.4.0-4+deb12u1

      usn · twisted · debian · bookworm; usn · twisted · debian · 12

  • Source package: [twisted]

    Details (4)
    • 22.4.0-4+deb12u1 · all · bookworm

      Fixed · Fixed: 22.4.0-4+deb12u1

      usn · twisted · debian · bookworm; usn · twisted · debian · 12

    • 22.4.0-4+deb12u1 · all · bookworm

      Fixed · Fixed: 22.4.0-4+deb12u1

      usn · twisted · debian · bookworm; usn · twisted · debian · 12

    • 22.4.0-4+deb12u1 · all · bookworm-security

      Fixed · Fixed: 22.4.0-4+deb12u1

      usn · twisted · debian · bookworm; usn · twisted · debian · 12

    • 22.4.0-4+deb12u1 · all · bookworm-security

      Fixed · Fixed: 22.4.0-4+deb12u1

      usn · twisted · debian · bookworm; usn · twisted · debian · 12

[Debian 13 (Trixie)]

  • Source package: [twisted]

    Details (2)
    • 24.11.0-1 · all · trixie

      Fixed · Fixed: 24.7.0-1

      usn · twisted · debian · 13

    • 24.11.0-1 · all · trixie

      Fixed · Fixed: 24.7.0-1

      usn · twisted · debian · 13

Next results

Observed:

References