Inconsistent interpretation of HTTP requests in Twisted Web - CVE-2024-41671

Vulnerability identifier: #VU94852

CSH Severity: High

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-41671

CWE-ID: CWE-444

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP requests in twisted.web. A remote attacker can send a specially crafted HTTP request to the server and smuggle arbitrary HTTP headers.

Successful exploitation of vulnerability may allow an attacker to poison HTTP cache and perform phishing attacks.

Twisted Web
Debian Linux
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Enterprise Storage
Web and Scripting Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
Ubuntu
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Public Cloud Module
Python 3 Module
Server Applications Module
openSUSE Leap
openEuler
python-twisted (Ubuntu package)
python3-twisted (Ubuntu package)
python-Twisted-debuginfo
python-Twisted
python-Twisted-debugsource
python3-Twisted-debuginfo
python3-Twisted
python-Twisted-doc
python-twisted
python3-twisted
python-twisted-help
twisted (Debian package)
python311-Twisted-tls
python311-Twisted-conch
python311-Twisted-contextvars
python311-Twisted-serial
python311-Twisted
python311-Twisted-conch_nacl
python311-Twisted-all_non_platform
python311-Twisted-http2
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data

Install updates from vendor's website.

Twisted Web - update to 24.7.0 rc1
python-twisted (Ubuntu package) - update to Ubuntu Pro
python3-twisted (Ubuntu package) - addressed in versions Ubuntu Pro, 18.9.0-11ubuntu0.20.04.4, 18.9.0-11ubuntu0.20.04.5, 22.1.0-2ubuntu2.5, 22.1.0-2ubuntu2.6, 24.3.0-1ubuntu0.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.1.1
python-Twisted-debuginfo - addressed in versions 15.2.1-9.26.1, 19.10.0-150200.3.24.1
python-Twisted - update to 15.2.1-9.26.1
python-Twisted-debugsource - addressed in versions 15.2.1-9.26.1, 19.10.0-150200.3.24.1
python3-Twisted-debuginfo - update to 19.10.0-150200.3.24.1
python3-Twisted - addressed in versions 19.10.0-150200.3.24.1, 22.2.0-150400.21.1
python-Twisted-doc - update to 22.2.0-150400.21.1
python-twisted - addressed in versions 22.4.0-3, 22.4.0-4, 22.10.0-4
python3-twisted - addressed in versions 22.4.0-3, 22.4.0-4, 22.10.0-4
python-twisted-help - addressed in versions 22.4.0-3, 22.4.0-4, 22.10.0-4
twisted (Debian package) - update to 22.4.0-4+deb12u1
python311-Twisted-tls - update to 22.10.0-150400.5.23.1
python311-Twisted-conch - update to 22.10.0-150400.5.23.1
python311-Twisted-contextvars - update to 22.10.0-150400.5.23.1
python311-Twisted-serial - update to 22.10.0-150400.5.23.1
python311-Twisted - update to 22.10.0-150400.5.23.1
python311-Twisted-conch_nacl - update to 22.10.0-150400.5.23.1
python311-Twisted-all_non_platform - update to 22.10.0-150400.5.23.1
python311-Twisted-http2 - update to 22.10.0-150400.5.23.1

• https://github.com/twisted/twisted/security/advisories/GHSA-c8m8-j448-xjx7
• https://github.com/twisted/twisted/commit/046a164f89a0f08d3239ecebd750360f8914df33
• https://github.com/twisted/twisted/commit/4a930de12fb67e88fefcb8822104152f42b27abc

• Multiple vulnerabilities in Twisted Web
• SUSE update for python-Twisted
• SUSE update for python-Twisted
• SUSE update for python3-Twisted
• SUSE update for python-Twisted
• openEuler 24.03 LTS update for python-twisted
• openEuler 22.03 LTS SP3 update for python-twisted
• openEuler 20.03 LTS SP4 update for python-twisted
• openEuler 22.03 LTS SP1 update for python-twisted
• openEuler 22.03 LTS SP4 update for python-twisted
• Ubuntu update for twisted
• Debian update for twisted
• Ubuntu update for twisted
• IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data update for Twisted