Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 584
Alerts This Week
Warning Icon 1 584

Ubuntu 16.04 / 14.04 USN-3585-1 Critical: Twisted Network Risk

ubuntu
Calendar Grey March 6, 2018
Scroller Ubuntu
Debian Security Alert DSA-4800-1 warns of a complex flaw enabling unrestricted execution through specially designed packets.
Twisted could be made to run programs if it received specially crafted network traffic.

Summary

Twisted could be made to run programs if it received specially crafted

network traffic.

Software Description:

- twisted: Event-based framework for internet applications

Details:

It was discovered that Twisted incorrectly handled certain HTTP

requests. An attacker could possibly use this issue to execute

arbitrary code.

Topics%20covered

Topics Covered

security advisory arbitrary code execution ubuntu network attack twisted

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  python-twisted                  16.0.0-1ubuntu0.2
  python-twisted-bin              16.0.0-1ubuntu0.2
  python-twisted-web              16.0.0-1ubuntu0.2
  python3-twisted                 16.0.0-1ubuntu0.2

Ubuntu 14.04 LTS:
  python-twisted                  13.2.0-1ubuntu1.2
  python-twisted-bin              13.2.0-1ubuntu1.2
  python-twisted-web              13.2.0-1ubuntu1.2

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3585-1

  CVE-2016-1000111

Severity
critical
Lowest
Low
Medium
High
Critical

March 05, 2018

Topics%20covered

Topics Covered

security advisory arbitrary code execution ubuntu network attack twisted

Package Information

  https://launchpad.net/ubuntu/+source/twisted/16.0.0-1ubuntu0.2
  https://launchpad.net/ubuntu/+source/twisted/13.2.0-1ubuntu1.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.