CVE-2014-7143
published 2019-11-12CVE-2014-7143: Python Twisted 14.0 trustRoot is not respected in HTTP client
PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
2.59%
83.4th percentile
Python Twisted 14.0 trustRoot is not respected in HTTP client
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | twisted | < twisted 14.0.2-1 (bookworm) | twisted 14.0.2-1 (bookworm) |
| twisted | twisted | — | — |
| twisted | twisted | >= 0 < 14.0.2-1 | 14.0.2-1 |
| twisted | twisted | >= 0 < 14.0.2-1 | 14.0.2-1 |
| twisted | twisted | >= 0 < 14.0.2-1 | 14.0.2-1 |
| twisted | twisted | >= 0 < 14.0.2-1 | 14.0.2-1 |
| twisted | twisted | >= 14.0.0 < 14.0.1 | 14.0.1 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
python-twisted-web: specified trustRoot not respected
vendor_redhat·2014-09-17·CVSS 7.5
CVE-2014-7143 [HIGH] python-twisted-web: specified trustRoot not respected
python-twisted-web: specified trustRoot not respected
Python Twisted 14.0 trustRoot is not respected in HTTP client
Statement: Not vulnerable. This issue did not affect the versions of python-twisted-web as shipped with Red Hat Enterprise Linux 6 and 7.
Package: python-twisted-web (Red Hat Enterprise Linux 6) - Not affected
Package: python-twisted-web (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2014-7143: twisted - Python Twisted 14.0 trustRoot is not respected in HTTP client
vendor_debian·2014·CVSS 7.5
CVE-2014-7143 [HIGH] CVE-2014-7143: twisted - Python Twisted 14.0 trustRoot is not respected in HTTP client
Python Twisted 14.0 trustRoot is not respected in HTTP client
Scope: local
bookworm: resolved (fixed in 14.0.2-1)
bullseye: resolved (fixed in 14.0.2-1)
forky: resolved (fixed in 14.0.2-1)
sid: resolved (fixed in 14.0.2-1)
trixie: resolved (fixed in 14.0.2-1)
OSV
Python Twisted trustRoot is not respected in HTTP client
osv·2019-12-17
CVE-2014-7143 [HIGH] Python Twisted trustRoot is not respected in HTTP client
Python Twisted trustRoot is not respected in HTTP client
Python Twisted 14.0.0 `trustRoot` is not respected in HTTP client
GHSA
Python Twisted trustRoot is not respected in HTTP client
ghsa·2019-12-17
CVE-2014-7143 [HIGH] CWE-295 Python Twisted trustRoot is not respected in HTTP client
Python Twisted trustRoot is not respected in HTTP client
Python Twisted 14.0.0 `trustRoot` is not respected in HTTP client
OSV
CVE-2014-7143: Python Twisted 14
osv·2019-11-12·CVSS 7.5
CVE-2014-7143 [HIGH] CVE-2014-7143: Python Twisted 14
Python Twisted 14.0 trustRoot is not respected in HTTP client
No detection rules found.
No public exploits indexed.
http://www.openwall.com/lists/oss-security/2014/09/22/2https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-7143https://exchange.xforce.ibmcloud.com/vulnerabilities/96135https://security-tracker.debian.org/tracker/CVE-2014-7143http://www.openwall.com/lists/oss-security/2014/09/22/2https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-7143https://exchange.xforce.ibmcloud.com/vulnerabilities/96135https://security-tracker.debian.org/tracker/CVE-2014-7143
2019-11-12
Published