Ubuntu Twisted Critical Denial of Service Vulnerability USN-8380-1

ubuntu

June 3, 2026

Twisted could be made to crash if it received specially crafted network traffic.

Summary

Twisted could be made to crash if it received specially crafted network

traffic.

Software Description:

- twisted: Event-based framework for internet applications

Details:

It was discovered that Twisted incorrectly handled DNS name decompression.

A remote attacker could possibly use this issue to cause Twisted to consume

excessive resources, leading to a denial of service.

Topics Covered

security advisory denial of service critical Ubuntu network traffic twisted

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  python3-twisted                 25.5.0-5ubuntu0.1

Ubuntu 25.10
  python3-twisted                 24.11.0-1ubuntu0.1

Ubuntu 24.04 LTS
  python3-twisted                 24.3.0-1ubuntu0.2

Ubuntu 22.04 LTS
  python3-twisted                 22.1.0-2ubuntu2.7

In general, a standard system update will make all the necessary changes.