Log in Start free

Vulnerability · Published Mar 3, 2022 · Assigned by GitHub_M

CVE-2022-21716Buffer Overflow in Twisted

High 7.5

In plain English

A high-severity buffer overflow in twisted from twisted. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.5% (higher than 89% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)3.5%top 10.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the peer's SSH version identifier. This ends up with a buffer using all the available memory. The attach is a simple as `nc -rv localhost 22 < /dev/zero`. A patch is available in version 22.2.0. There are currently no known workarounds.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20py3-twisted22.2.0-r0ALPINE-CVE-2022-21716
Alpine:v3.21py3-twisted22.2.0-r0ALPINE-CVE-2022-21716
Alpine:v3.22py3-twisted22.2.0-r0ALPINE-CVE-2022-21716
Alpine:v3.23py3-twisted22.2.0-r0ALPINE-CVE-2022-21716
Alpine:v3.24py3-twisted22.2.0-r0ALPINE-CVE-2022-21716
Debian:12twisted22.2.0-1DEBIAN-CVE-2022-21716
Debian:13twisted22.2.0-1DEBIAN-CVE-2022-21716
Debian:14twisted22.2.0-1DEBIAN-CVE-2022-21716
PyPItwisted22.2.0PYSEC-2022-160
PyPItwisted22.2.0GHSA-rv6r-3f5q-9rgx
Ubuntu:22.04:LTStwisted22.1.0-2ubuntu2.1UBUNTU-CVE-2022-21716
Ubuntu:22.04:LTStwisted22.1.0-2ubuntu2.1USN-5354-2

Affected products (as reported)

VendorProductVersions
twisted twisted < 22.2.0

Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References