Skip to content
OpenAdvisories
High USN-5354-2 1 CVE

twisted vulnerability

Published May 5, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

USN-5354-1 fixed vulnerabilities in Twisted. This update provides the
corresponding updates for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and
Ubuntu 22.04 LTS.

Original advisory details:

It was discovered that Twisted incorrectly processed SSH handshake data on
connection establishments. A remote attacker could use this issue to cause
Twisted to crash, resulting in a denial of service. (CVE-2022-21716)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS twisted 22.1.0-2ubuntu2.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS twisted 13.2.0-1ubuntu1.2+esm2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS twisted 16.0.0-1ubuntu0.4+esm1

Vulnerabilities 1

  • High 7.5
    CVE-2022-21716

    Buffer Overflow in Twisted

    Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the peer's SSH version identifier. This ends up with a buffer usin…

    twisted twisted twisted twisted Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2022-21716