Your submission was sent successfully! Close

USN-5354-2: Twisted vulnerability

5 May 2022

Twisted could be made to crash if it received specially crafted network traffic.

Releases

Packages

  • twisted - Event-based framework for internet applications

Details

USN-5354-1 fixed vulnerabilities in Twisted. This update provides the
corresponding updates for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and
Ubuntu 22.04 LTS.

Original advisory details:

It was discovered that Twisted incorrectly processed SSH handshake data on
connection establishments. A remote attacker could use this issue to cause
Twisted to crash, resulting in a denial of service. (CVE-2022-21716)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 22.04
Ubuntu 16.04
Ubuntu 14.04

In general, a standard system update will make all the necessary changes.

References

Related notices

  • USN-5354-1: python-twisted-words, python-twisted-bin, twisted, python3-twisted, python-twisted, python-twisted-mail, python-twisted-news, python-twisted-web, python-twisted-conch, python-twisted-names, python3-twisted-bin, python-twisted-core, python-twisted-runner, twisted-doc