Twisted 26.4.0 Release Candidate 1
Approved changes feed: RSS · Atom
cpe:2.3:a:twisted:twisted:26.4.0:rc1:*:*:*:*:*:*part: a version: 26.4.0 update: rc1
| Vendor | Twisted (1e8a58ae-1059-56e4-9c41-106a66b765ed) |
|---|---|
| Product | Twisted (e825b297-1bdc-575b-91f4-27920e4f88bd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-42304 |
vulnerable | 2026-06-08 08:03:16.146852 |
Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
HIGH (7.5)
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. A remote, unauthenticated attacker can exploit this by sending a crafted TCP DNS packet containing deeply chained compression pointers. This flaw bypasses previous loop-prevention logic, causing the single-threaded Twisted reactor to hang while processing millions of recursive lookups, effectively freezing the server. This vulnerability is fixed in 26.4.0rc2.
Published: 2026-05-13T20:20:29.149Z
Updated: 2026-05-14T15:45:34.746Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.