CVE-2019-12855
Fixed in a distro release EPSS 2%
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.
Products: twisted
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | twisted | 19.7.0rc1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | twisted | 18.9.0-7 |
| Debian 13 | twisted | 18.9.0-7 |
| Debian 14 | twisted | 18.9.0-7 |
| SUSE Enterprise Storage 4 | python-Twisted | 15.2.1-9.8.1 |
| SUSE Enterprise Storage 5 | python-Twisted | 15.2.1-9.8.1 |
| SUSE HPE Helion OpenStack 8 | python-Twisted | 15.2.1-9.8.1 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python-Twisted | 15.2.1-9.8.1 |
| SUSE OpenStack Cloud 7 | python-Twisted | 15.2.1-9.8.1 |
| SUSE OpenStack Cloud 8 | python-Twisted | 15.2.1-9.8.1 |
| SUSE OpenStack Cloud 9 | python-Twisted | 15.2.1-9.8.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-Twisted | 15.2.1-9.8.1 |
| SUSE OpenStack Cloud Crowbar 9 | python-Twisted | 15.2.1-9.8.1 |
| SUSE Package Hub 15 | python-Twisted | 17.9.0-bp150.4.6.1 |
| Ubuntu 16.04 LTS | twisted | 16.0.0-1ubuntu0.4 |
| Ubuntu 18.04 LTS | twisted | 17.9.0-2ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | twisted | 13.2.0-1ubuntu1.2+esm1 |
| openSUSE Leap 15.0 | python-Twisted | 17.9.0-lp151.3.6.1 |
| openSUSE Leap 15.1 | python-Twisted | 17.9.0-lp151.3.6.1 |
| openSUSE Tumbleweed | python-Twisted | 21.7.0-3.2 |