Skip to content
OpenAdvisories
High USN-8380-1 1 CVE

twisted vulnerability

Published Jun 3, 2026 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Twisted incorrectly handled DNS name decompression.
A remote attacker could possibly use this issue to cause Twisted to consume
excessive resources, leading to a denial of service.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS twisted 22.1.0-2ubuntu2.7
Ubuntu · 24.04 LTS 24.04:LTS twisted 24.3.0-1ubuntu0.2
Ubuntu · 25.10 twisted 24.11.0-1ubuntu0.1
Ubuntu · 26.04 LTS 26.04:LTS twisted 25.5.0-5ubuntu0.1

Vulnerabilities 1

  • High 7.5
    CVE-2026-42304

    Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains

    Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. A remote, unauthentica…

    twisted twisted twisted twisted Debian Ubuntu Azure Linux PyPI

References

  • report
    https://ubuntu.com/security/CVE-2026-42304