CVE-2016-1000111
Fixed in a distro release EPSS 3%
Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.
Products: twisted
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | twisted | 16.3.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | twisted | 16.4.0-1 |
| Debian 13 | twisted | 16.4.0-1 |
| Debian 14 | twisted | 16.4.0-1 |
| Red Hat Enterprise Linux 6 | python-twisted-web | 0:8.2.0-5.el6_8 |
| Red Hat Enterprise Linux 7 | python-twisted-web | 0:12.1.0-5.el7_2 |
| Red Hat satellite 6.1 | candlepin | 0:0.9.54.26-1.el6 |
| Red Hat satellite 6.1 | candlepin-selinux | 0:0.9.54.26-1.el6 |
| Red Hat satellite 6.1 | foreman | 0:1.11.0.86-1.el6sat |
| Red Hat satellite 6.1 | foreman-compute | 0:1.11.0.86-1.el6sat |
| Red Hat satellite 6.1 | foreman-debug | 0:1.11.0.86-1.el6sat |
| Red Hat satellite 6.1 | foreman-ec2 | 0:1.11.0.86-1.el6sat |
| Red Hat satellite 6.1 | foreman-gce | 0:1.11.0.86-1.el6sat |
| Red Hat satellite 6.1 | foreman-installer | 1:1.11.0.18-1.el6sat |
| Red Hat satellite 6.1 | foreman-installer-katello | 0:3.0.0.101-1.el6sat |
| Red Hat satellite 6.1 | foreman-libvirt | 0:1.11.0.86-1.el6sat |
| Red Hat satellite 6.1 | foreman-openstack | 0:1.11.0.86-1.el6sat |
| Red Hat satellite 6.1 | foreman-ovirt | 0:1.11.0.86-1.el6sat |
| Red Hat satellite 6.1 | foreman-postgresql | 0:1.11.0.86-1.el6sat |
| Red Hat satellite 6.1 | foreman-rackspace | 0:1.11.0.86-1.el6sat |
| Red Hat satellite 6.1 | foreman-vmware | 0:1.11.0.86-1.el6sat |
| Red Hat satellite 6.1 | katello | 0:3.0.0-33.el6sat |
| Red Hat satellite 6.1 | katello-capsule | 0:3.0.0-33.el6sat |
| Red Hat satellite 6.1 | katello-common | 0:3.0.0-33.el6sat |
| Red Hat satellite 6.1 | katello-debug | 0:3.0.0-33.el6sat |
| Red Hat satellite 6.1 | katello-installer-base | 0:3.0.0.101-1.el6sat |
| Red Hat satellite 6.1 | katello-service | 0:3.0.0-33.el6sat |
| Red Hat satellite 6.1 | libqpid-dispatch | 0:0.4-27.el6sat |
| Red Hat satellite 6.1 | pulp | 0:2.8.7.18-1.el6sat |
| Red Hat satellite 6.1 | pulp-admin-client | 0:2.8.7.18-1.el6sat |
| Red Hat satellite 6.1 | pulp-puppet | 0:2.8.7.2-1.el6sat |
| Red Hat satellite 6.1 | pulp-puppet-admin-extensions | 0:2.8.7.2-1.el6sat |
| Red Hat satellite 6.1 | pulp-puppet-plugins | 0:2.8.7.2-1.el6sat |
| Red Hat satellite 6.1 | pulp-puppet-tools | 0:2.8.7.2-1.el6sat |
| Red Hat satellite 6.1 | pulp-selinux | 0:2.8.7.18-1.el6sat |
| Red Hat satellite 6.1 | pulp-server | 0:2.8.7.18-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-agent-lib | 0:2.8.7.18-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-bindings | 0:2.8.7.18-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-client-lib | 0:2.8.7.18-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-common | 0:2.8.7.18-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-oid_validation | 0:2.8.7.18-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-puppet-common | 0:2.8.7.2-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-repoauth | 0:2.8.7.18-1.el6sat |
| Red Hat satellite 6.1 | python-pulp-streamer | 0:2.8.7.18-1.el6sat |
| Red Hat satellite 6.1 | python-qpid-proton | 0:0.9-21.el6 |
| Red Hat satellite 6.1 | qpid-dispatch | 0:0.4-27.el6sat |
| Red Hat satellite 6.1 | qpid-dispatch-debuginfo | 0:0.4-27.el6sat |
| Red Hat satellite 6.1 | qpid-dispatch-router | 0:0.4-27.el6sat |
| Red Hat satellite 6.1 | qpid-dispatch-tools | 0:0.4-27.el6sat |
| Red Hat satellite 6.1 | qpid-proton | 0:0.9-21.el6 |
| Red Hat satellite 6.1 | qpid-proton-c | 0:0.9-21.el6 |
| Red Hat satellite 6.1 | qpid-proton-debuginfo | 0:0.9-21.el6 |
| Red Hat satellite 6.1 | rubygem-smart_proxy_openscap | 0:0.5.3.9-2.el6sat |
| Red Hat satellite 6.1 | satellite | 0:6.2.14-4.0.el6sat |
| Red Hat satellite 6.1 | satellite-capsule | 0:6.2.14-4.0.el6sat |
| Red Hat satellite 6.1 | satellite-cli | 0:6.2.14-4.0.el6sat |
| Red Hat satellite 6.1 | satellite-debug-tools | 0:6.2.14-4.0.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-foreman_theme_satellite | 0:0.1.47.2-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-katello | 0:3.0.0.162-1.el6sat |
| Red Hat satellite 6.2 | candlepin | 0:0.9.54.26-1.el7 |
| Red Hat satellite 6.2 | candlepin-selinux | 0:0.9.54.26-1.el7 |
| Red Hat satellite 6.2 | foreman | 0:1.11.0.86-1.el7sat |
| Red Hat satellite 6.2 | foreman-compute | 0:1.11.0.86-1.el7sat |
| Red Hat satellite 6.2 | foreman-debug | 0:1.11.0.86-1.el7sat |
| Red Hat satellite 6.2 | foreman-ec2 | 0:1.11.0.86-1.el7sat |
| Red Hat satellite 6.2 | foreman-gce | 0:1.11.0.86-1.el7sat |
| Red Hat satellite 6.2 | foreman-installer | 1:1.11.0.18-1.el7sat |
| Red Hat satellite 6.2 | foreman-installer-katello | 0:3.0.0.101-1.el7sat |
| Red Hat satellite 6.2 | foreman-libvirt | 0:1.11.0.86-1.el7sat |
| Red Hat satellite 6.2 | foreman-openstack | 0:1.11.0.86-1.el7sat |
| Red Hat satellite 6.2 | foreman-ovirt | 0:1.11.0.86-1.el7sat |
| Red Hat satellite 6.2 | foreman-postgresql | 0:1.11.0.86-1.el7sat |
| Red Hat satellite 6.2 | foreman-rackspace | 0:1.11.0.86-1.el7sat |
| Red Hat satellite 6.2 | foreman-vmware | 0:1.11.0.86-1.el7sat |
| Red Hat satellite 6.2 | katello | 0:3.0.0-33.el7sat |
| Red Hat satellite 6.2 | katello-capsule | 0:3.0.0-33.el7sat |
| Red Hat satellite 6.2 | katello-common | 0:3.0.0-33.el7sat |
| Red Hat satellite 6.2 | katello-debug | 0:3.0.0-33.el7sat |
| Red Hat satellite 6.2 | katello-installer-base | 0:3.0.0.101-1.el7sat |
| Red Hat satellite 6.2 | katello-service | 0:3.0.0-33.el7sat |
| Red Hat satellite 6.2 | libqpid-dispatch | 0:0.4-27.el7sat |
| Red Hat satellite 6.2 | pulp | 0:2.8.7.18-1.el7sat |
| Red Hat satellite 6.2 | pulp-admin-client | 0:2.8.7.18-1.el7sat |
| Red Hat satellite 6.2 | pulp-puppet | 0:2.8.7.2-1.el7sat |
| Red Hat satellite 6.2 | pulp-puppet-admin-extensions | 0:2.8.7.2-1.el7sat |
| Red Hat satellite 6.2 | pulp-puppet-plugins | 0:2.8.7.2-1.el7sat |
| Red Hat satellite 6.2 | pulp-puppet-tools | 0:2.8.7.2-1.el7sat |
| Red Hat satellite 6.2 | pulp-selinux | 0:2.8.7.18-1.el7sat |
| Red Hat satellite 6.2 | pulp-server | 0:2.8.7.18-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-agent-lib | 0:2.8.7.18-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-bindings | 0:2.8.7.18-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-client-lib | 0:2.8.7.18-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-common | 0:2.8.7.18-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-oid_validation | 0:2.8.7.18-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-puppet-common | 0:2.8.7.2-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-repoauth | 0:2.8.7.18-1.el7sat |
| Red Hat satellite 6.2 | python-pulp-streamer | 0:2.8.7.18-1.el7sat |
| Red Hat satellite 6.2 | python-qpid-proton | 0:0.9-21.el7 |
| Red Hat satellite 6.2 | python-twisted-web | 0:12.1.0-5.el7_2 |
| Red Hat satellite 6.2 | qpid-dispatch | 0:0.4-27.el7sat |
| Red Hat satellite 6.2 | qpid-dispatch-debuginfo | 0:0.4-27.el7sat |
| Red Hat satellite 6.2 | qpid-dispatch-router | 0:0.4-27.el7sat |
| Red Hat satellite 6.2 | qpid-dispatch-tools | 0:0.4-27.el7sat |
| Red Hat satellite 6.2 | qpid-proton | 0:0.9-21.el7 |
| Red Hat satellite 6.2 | qpid-proton-c | 0:0.9-21.el7 |
| Red Hat satellite 6.2 | qpid-proton-debuginfo | 0:0.9-21.el7 |
| Red Hat satellite 6.2 | rubygem-smart_proxy_openscap | 0:0.5.3.9-2.el7sat |
| Red Hat satellite 6.2 | satellite | 0:6.2.14-4.0.el7sat |
| Red Hat satellite 6.2 | satellite-capsule | 0:6.2.14-4.0.el7sat |
| Red Hat satellite 6.2 | satellite-cli | 0:6.2.14-4.0.el7sat |
| Red Hat satellite 6.2 | satellite-debug-tools | 0:6.2.14-4.0.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-foreman_theme_satellite | 0:0.1.47.2-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-katello | 0:3.0.0.162-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-katello_ostree | 0:3.0.0.162-1.el7sat |
| Red Hat satellite capsule 6.1 | foreman | 0:1.11.0.86-1.el6sat |
| Red Hat satellite capsule 6.1 | foreman-debug | 0:1.11.0.86-1.el6sat |
| Red Hat satellite capsule 6.1 | foreman-installer | 1:1.11.0.18-1.el6sat |
| Red Hat satellite capsule 6.1 | foreman-installer-katello | 0:3.0.0.101-1.el6sat |
| Red Hat satellite capsule 6.1 | katello | 0:3.0.0-33.el6sat |
| Red Hat satellite capsule 6.1 | katello-capsule | 0:3.0.0-33.el6sat |
| Red Hat satellite capsule 6.1 | katello-debug | 0:3.0.0-33.el6sat |
| Red Hat satellite capsule 6.1 | katello-installer-base | 0:3.0.0.101-1.el6sat |
| Red Hat satellite capsule 6.1 | katello-service | 0:3.0.0-33.el6sat |
| Red Hat satellite capsule 6.1 | libqpid-dispatch | 0:0.4-27.el6sat |
| Red Hat satellite capsule 6.1 | pulp | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-admin-client | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-nodes-child | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-nodes-common | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-nodes-parent | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-puppet | 0:2.8.7.2-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-puppet-admin-extensions | 0:2.8.7.2-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-puppet-plugins | 0:2.8.7.2-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-selinux | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | pulp-server | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-agent-lib | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-bindings | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-client-lib | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-common | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-oid_validation | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-puppet-common | 0:2.8.7.2-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-repoauth | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | python-pulp-streamer | 0:2.8.7.18-1.el6sat |
| Red Hat satellite capsule 6.1 | python-qpid-proton | 0:0.9-21.el6 |
| Red Hat satellite capsule 6.1 | qpid-dispatch | 0:0.4-27.el6sat |
| Red Hat satellite capsule 6.1 | qpid-dispatch-debuginfo | 0:0.4-27.el6sat |
| Red Hat satellite capsule 6.1 | qpid-dispatch-router | 0:0.4-27.el6sat |
| Red Hat satellite capsule 6.1 | qpid-dispatch-tools | 0:0.4-27.el6sat |
| Red Hat satellite capsule 6.1 | qpid-proton | 0:0.9-21.el6 |
| Red Hat satellite capsule 6.1 | qpid-proton-c | 0:0.9-21.el6 |
| Red Hat satellite capsule 6.1 | qpid-proton-debuginfo | 0:0.9-21.el6 |
| Red Hat satellite capsule 6.1 | rubygem-smart_proxy_openscap | 0:0.5.3.9-2.el6sat |
| Red Hat satellite capsule 6.1 | satellite | 0:6.2.14-4.0.el6sat |
| Red Hat satellite capsule 6.1 | satellite-capsule | 0:6.2.14-4.0.el6sat |
| Red Hat satellite capsule 6.1 | satellite-debug-tools | 0:6.2.14-4.0.el6sat |
| Red Hat satellite capsule 6.2 | foreman | 0:1.11.0.86-1.el7sat |
| Red Hat satellite capsule 6.2 | foreman-debug | 0:1.11.0.86-1.el7sat |
| Red Hat satellite capsule 6.2 | foreman-installer | 1:1.11.0.18-1.el7sat |
| Red Hat satellite capsule 6.2 | foreman-installer-katello | 0:3.0.0.101-1.el7sat |
| Red Hat satellite capsule 6.2 | katello | 0:3.0.0-33.el7sat |
| Red Hat satellite capsule 6.2 | katello-capsule | 0:3.0.0-33.el7sat |
| Red Hat satellite capsule 6.2 | katello-debug | 0:3.0.0-33.el7sat |
| Red Hat satellite capsule 6.2 | katello-installer-base | 0:3.0.0.101-1.el7sat |
| Red Hat satellite capsule 6.2 | katello-service | 0:3.0.0-33.el7sat |
| Red Hat satellite capsule 6.2 | libqpid-dispatch | 0:0.4-27.el7sat |
| Red Hat satellite capsule 6.2 | pulp | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-admin-client | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-nodes-child | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-nodes-common | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-nodes-parent | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-puppet | 0:2.8.7.2-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-puppet-admin-extensions | 0:2.8.7.2-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-puppet-plugins | 0:2.8.7.2-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-selinux | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | pulp-server | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-agent-lib | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-bindings | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-client-lib | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-common | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-oid_validation | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-puppet-common | 0:2.8.7.2-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-repoauth | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | python-pulp-streamer | 0:2.8.7.18-1.el7sat |
| Red Hat satellite capsule 6.2 | python-qpid-proton | 0:0.9-21.el7 |
| Red Hat satellite capsule 6.2 | python-twisted-web | 0:12.1.0-5.el7_2 |
| Red Hat satellite capsule 6.2 | qpid-dispatch | 0:0.4-27.el7sat |
| Red Hat satellite capsule 6.2 | qpid-dispatch-debuginfo | 0:0.4-27.el7sat |
| Red Hat satellite capsule 6.2 | qpid-dispatch-router | 0:0.4-27.el7sat |
| Red Hat satellite capsule 6.2 | qpid-dispatch-tools | 0:0.4-27.el7sat |
| Red Hat satellite capsule 6.2 | qpid-proton | 0:0.9-21.el7 |
| Red Hat satellite capsule 6.2 | qpid-proton-c | 0:0.9-21.el7 |
| Red Hat satellite capsule 6.2 | qpid-proton-debuginfo | 0:0.9-21.el7 |
| Red Hat satellite capsule 6.2 | rubygem-smart_proxy_openscap | 0:0.5.3.9-2.el7sat |
| Red Hat satellite capsule 6.2 | satellite | 0:6.2.14-4.0.el7sat |
| Red Hat satellite capsule 6.2 | satellite-capsule | 0:6.2.14-4.0.el7sat |
| Red Hat satellite capsule 6.2 | satellite-debug-tools | 0:6.2.14-4.0.el7sat |
| SUSE Enterprise Storage 3 | python-Twisted | 15.2.1-8.1 |
| SUSE Enterprise Storage 4 | python-Twisted | 15.2.1-8.1 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python-Twisted | 15.2.1-8.1 |
| Ubuntu 14.04 LTS | twisted | 13.2.0-1ubuntu1.2 |
| Ubuntu 16.04 LTS | twisted | 16.0.0-1ubuntu0.2 |
| openSUSE Tumbleweed | python-Twisted | 16.4.1-1.2 |