Logo
›
›vulnerability›CVE-2024-41671
Name
CVE-2024-41671
Source
NVD ( link)Debian ( link)
Description
Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
python3-twisted
Patched

Vulnerability Ratings#


8.3
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
24.11.0
Not Affected
buildroot
master
26.4.0
Not Affected
openwrt
master
26.4.0-r1
Not Affected
openwrt
openwrt-25.12
25.5.0-r1
Not Affected
yocto
master
26.4.0
Not Affected

Resolved with patches#


python3-twisted (yocto:scarthgap)

#
Title
Author
Resolve
1
Merge commit from fork
Adi Roiban <adiroiban@gmail.com>
CVE-2024-41671