Every CVE Search/ Get API key

CVE-2016-1000111

Forced Browsing in Twisted

5.3 MediumFix available

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

2.76%Up 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.3

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

Record
CVE-2016-1000111
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-425
Updated
2026-11-02
CVE List No score

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

Record
CVE-2016-1000111
Updated
2026-11-02
EUVDEUVD-2020-0227 No score

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

Record
EUVD-2020-0227
Updated
2026-11-03
GitHub AdvisoriesGHSA-3gqj-cmxr-p4x2 6.9

Forced Browsing in Twisted

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an httpoxy issue.

Record
GHSA-3gqj-cmxr-p4x2
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-425
Updated
2026-11-02
OSVBELL-CVE-2016-1000111 5.3

CVE-2016-1000111 does not affect BellSoft software

Record
BELL-CVE-2016-1000111
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSV 5.3

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

Record
CVE-2016-1000111
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 10 moreShow less
OSVDEBIAN-CVE-2016-1000111 5.3

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

Record
DEBIAN-CVE-2016-1000111
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVGHSA-3gqj-cmxr-p4x2 6.9

Forced Browsing in Twisted

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an httpoxy issue.

Record
GHSA-3gqj-cmxr-p4x2
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-425
Updated
2026-11-02
OSVRHSA-2016:1978 5.0

Red Hat Security Advisory: python-twisted-web security update

Record
RHSA-2016:1978
CVSS 3.0
5.0 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2018:0273 5.0

Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update

Record
RHSA-2018:0273
CVSS 3.0
5.0 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2016-1000111 5.3

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

Record
UBUNTU-CVE-2016-1000111
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVMGASA-2016-0340 No score

Updated python-twisted-web packages fix a security vulnerability

It was discovered that python-twisted-web used the value of the Proxy header from HTTP requests to initialize the HTTP_PROXY environment variable for CGI scripts, which in turn was incorrectly used by certain HTTP client implementations to configure the proxy for outgoing HTTP requests. A remote attacker could possibly use this flaw to redirect HTTP requests performed by a CGI script to an attacker-controlled proxy via a malicious HTTP request. (CVE-2016-1000111)

Record
MGASA-2016-0340
Updated
2026-11-02
OSVopenSUSE-SU-2024:10162-1 No score

python3-Twisted-16.4.1-1.2 on GA media

These are all security issues fixed in the python3-Twisted-16.4.1-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10162-1
Updated
2026-11-02
OSVPYSEC-2020-214 No score

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

Record
PYSEC-2020-214
Updated
2026-11-02
OSVSUSE-SU-2017:0114-1 No score

Security update for python-Twisted

This update for python-Twisted fixes the following issues:

  • CVE-2016-1000111: sets environmental variable HTTP_PROXY based on user supplied Proxy request header (bsc#989997)
Record
SUSE-SU-2017:0114-1
Updated
2026-11-02
OSVUSN-3585-1 No score

twisted vulnerability

It was discovered that Twisted incorrectly handled certain HTTP requests. An attacker could possibly use this issue to execute arbitrary code.

Record
USN-3585-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
twisted
PyPI
 before 16.3.1
16.3.1
twisted
Debian:12
 before 16.4.0-1
16.4.0-1
twisted
Debian:13
 before 16.4.0-1
16.4.0-1
twisted
Debian:14
 before 16.4.0-1
16.4.0-1
twisted
PyPI
 before 16.3.1, plus listed versions
1.0.11.0.31.0.41.0.51.0.6
Show 39 moreShow less
1.0.71.1.01.1.11.2.010.0.010.1.010.2.011.0.011.1.012.0.012.1.012.2.012.3.013.0.013.1.013.2.014.0.014.0.114.0.215.0.015.1.015.2.015.2.115.3.015.4.015.5.016.0.016.1.016.1.116.2.016.3.02.1.02.4.02.5.08.0.08.0.18.1.08.2.09.0.0
16.3.1
python-twisted-web
Mageia:5
 before 14.0.1-3.1.mga5
14.0.1-3.1.mga5
python-twisted-web
Red Hat:enterprise_linux:6::client
 before 0:8.2.0-5.el6_8
0:8.2.0-5.el6_8
python-twisted-web
Red Hat:enterprise_linux:6::server
 before 0:8.2.0-5.el6_8
0:8.2.0-5.el6_8
python-twisted-web
Red Hat:enterprise_linux:6::workstation
 before 0:8.2.0-5.el6_8
0:8.2.0-5.el6_8
python-twisted-web
Red Hat:enterprise_linux:7::client
 before 0:12.1.0-5.el7_2
0:12.1.0-5.el7_2
Show 197 moreShow less
Affected packages
PackageAffectedFixed
python-twisted-web
Red Hat:enterprise_linux:7::server
 before 0:12.1.0-5.el7_2
0:12.1.0-5.el7_2
python-twisted-web
Red Hat:enterprise_linux:7::workstation
 before 0:12.1.0-5.el7_2
0:12.1.0-5.el7_2
foreman
Red Hat:satellite_capsule:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-debug
Red Hat:satellite_capsule:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-installer
Red Hat:satellite_capsule:6.1::el6
 before 1:1.11.0.18-1.el6sat
1:1.11.0.18-1.el6sat
foreman-installer-katello
Red Hat:satellite_capsule:6.1::el6
 before 0:3.0.0.101-1.el6sat
0:3.0.0.101-1.el6sat
katello
Red Hat:satellite_capsule:6.1::el6
 before 0:3.0.0-33.el6sat
0:3.0.0-33.el6sat
katello-capsule
Red Hat:satellite_capsule:6.1::el6
 before 0:3.0.0-33.el6sat
0:3.0.0-33.el6sat
katello-debug
Red Hat:satellite_capsule:6.1::el6
 before 0:3.0.0-33.el6sat
0:3.0.0-33.el6sat
katello-installer-base
Red Hat:satellite_capsule:6.1::el6
 before 0:3.0.0.101-1.el6sat
0:3.0.0.101-1.el6sat
katello-service
Red Hat:satellite_capsule:6.1::el6
 before 0:3.0.0-33.el6sat
0:3.0.0-33.el6sat
libqpid-dispatch
Red Hat:satellite_capsule:6.1::el6
 before 0:0.4-27.el6sat
0:0.4-27.el6sat
pulp
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
pulp-admin-client
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
pulp-nodes-child
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
pulp-nodes-common
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
pulp-nodes-parent
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
pulp-puppet
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.2-1.el6sat
0:2.8.7.2-1.el6sat
pulp-puppet-admin-extensions
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.2-1.el6sat
0:2.8.7.2-1.el6sat
pulp-puppet-plugins
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.2-1.el6sat
0:2.8.7.2-1.el6sat
pulp-selinux
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
pulp-server
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-agent-lib
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-bindings
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-client-lib
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-common
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-oid_validation
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-puppet-common
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.2-1.el6sat
0:2.8.7.2-1.el6sat
python-pulp-repoauth
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-streamer
Red Hat:satellite_capsule:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-qpid-proton
Red Hat:satellite_capsule:6.1::el6
 before 0:0.9-21.el6
0:0.9-21.el6
qpid-dispatch
Red Hat:satellite_capsule:6.1::el6
 before 0:0.4-27.el6sat
0:0.4-27.el6sat
qpid-dispatch-debuginfo
Red Hat:satellite_capsule:6.1::el6
 before 0:0.4-27.el6sat
0:0.4-27.el6sat
qpid-dispatch-router
Red Hat:satellite_capsule:6.1::el6
 before 0:0.4-27.el6sat
0:0.4-27.el6sat
qpid-dispatch-tools
Red Hat:satellite_capsule:6.1::el6
 before 0:0.4-27.el6sat
0:0.4-27.el6sat
qpid-proton
Red Hat:satellite_capsule:6.1::el6
 before 0:0.9-21.el6
0:0.9-21.el6
qpid-proton-c
Red Hat:satellite_capsule:6.1::el6
 before 0:0.9-21.el6
0:0.9-21.el6
qpid-proton-debuginfo
Red Hat:satellite_capsule:6.1::el6
 before 0:0.9-21.el6
0:0.9-21.el6
rubygem-smart_proxy_openscap
Red Hat:satellite_capsule:6.1::el6
 before 0:0.5.3.9-2.el6sat
0:0.5.3.9-2.el6sat
satellite
Red Hat:satellite_capsule:6.1::el6
 before 0:6.2.14-4.0.el6sat
0:6.2.14-4.0.el6sat
satellite-capsule
Red Hat:satellite_capsule:6.1::el6
 before 0:6.2.14-4.0.el6sat
0:6.2.14-4.0.el6sat
satellite-debug-tools
Red Hat:satellite_capsule:6.1::el6
 before 0:6.2.14-4.0.el6sat
0:6.2.14-4.0.el6sat
candlepin
Red Hat:satellite:6.1::el6
 before 0:0.9.54.26-1.el6
0:0.9.54.26-1.el6
candlepin-selinux
Red Hat:satellite:6.1::el6
 before 0:0.9.54.26-1.el6
0:0.9.54.26-1.el6
foreman
Red Hat:satellite:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-compute
Red Hat:satellite:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-debug
Red Hat:satellite:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-ec2
Red Hat:satellite:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-gce
Red Hat:satellite:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-installer
Red Hat:satellite:6.1::el6
 before 1:1.11.0.18-1.el6sat
1:1.11.0.18-1.el6sat
foreman-installer-katello
Red Hat:satellite:6.1::el6
 before 0:3.0.0.101-1.el6sat
0:3.0.0.101-1.el6sat
foreman-libvirt
Red Hat:satellite:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-openstack
Red Hat:satellite:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-ovirt
Red Hat:satellite:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-postgresql
Red Hat:satellite:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-rackspace
Red Hat:satellite:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
foreman-vmware
Red Hat:satellite:6.1::el6
 before 0:1.11.0.86-1.el6sat
0:1.11.0.86-1.el6sat
katello
Red Hat:satellite:6.1::el6
 before 0:3.0.0-33.el6sat
0:3.0.0-33.el6sat
katello-capsule
Red Hat:satellite:6.1::el6
 before 0:3.0.0-33.el6sat
0:3.0.0-33.el6sat
katello-common
Red Hat:satellite:6.1::el6
 before 0:3.0.0-33.el6sat
0:3.0.0-33.el6sat
katello-debug
Red Hat:satellite:6.1::el6
 before 0:3.0.0-33.el6sat
0:3.0.0-33.el6sat
katello-installer-base
Red Hat:satellite:6.1::el6
 before 0:3.0.0.101-1.el6sat
0:3.0.0.101-1.el6sat
katello-service
Red Hat:satellite:6.1::el6
 before 0:3.0.0-33.el6sat
0:3.0.0-33.el6sat
libqpid-dispatch
Red Hat:satellite:6.1::el6
 before 0:0.4-27.el6sat
0:0.4-27.el6sat
pulp
Red Hat:satellite:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
pulp-admin-client
Red Hat:satellite:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
pulp-puppet
Red Hat:satellite:6.1::el6
 before 0:2.8.7.2-1.el6sat
0:2.8.7.2-1.el6sat
pulp-puppet-admin-extensions
Red Hat:satellite:6.1::el6
 before 0:2.8.7.2-1.el6sat
0:2.8.7.2-1.el6sat
pulp-puppet-plugins
Red Hat:satellite:6.1::el6
 before 0:2.8.7.2-1.el6sat
0:2.8.7.2-1.el6sat
pulp-puppet-tools
Red Hat:satellite:6.1::el6
 before 0:2.8.7.2-1.el6sat
0:2.8.7.2-1.el6sat
pulp-selinux
Red Hat:satellite:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
pulp-server
Red Hat:satellite:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-agent-lib
Red Hat:satellite:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-bindings
Red Hat:satellite:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-client-lib
Red Hat:satellite:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-common
Red Hat:satellite:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-oid_validation
Red Hat:satellite:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-puppet-common
Red Hat:satellite:6.1::el6
 before 0:2.8.7.2-1.el6sat
0:2.8.7.2-1.el6sat
python-pulp-repoauth
Red Hat:satellite:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-pulp-streamer
Red Hat:satellite:6.1::el6
 before 0:2.8.7.18-1.el6sat
0:2.8.7.18-1.el6sat
python-qpid-proton
Red Hat:satellite:6.1::el6
 before 0:0.9-21.el6
0:0.9-21.el6
qpid-dispatch
Red Hat:satellite:6.1::el6
 before 0:0.4-27.el6sat
0:0.4-27.el6sat
qpid-dispatch-debuginfo
Red Hat:satellite:6.1::el6
 before 0:0.4-27.el6sat
0:0.4-27.el6sat
qpid-dispatch-router
Red Hat:satellite:6.1::el6
 before 0:0.4-27.el6sat
0:0.4-27.el6sat
qpid-dispatch-tools
Red Hat:satellite:6.1::el6
 before 0:0.4-27.el6sat
0:0.4-27.el6sat
qpid-proton
Red Hat:satellite:6.1::el6
 before 0:0.9-21.el6
0:0.9-21.el6
qpid-proton-c
Red Hat:satellite:6.1::el6
 before 0:0.9-21.el6
0:0.9-21.el6
qpid-proton-debuginfo
Red Hat:satellite:6.1::el6
 before 0:0.9-21.el6
0:0.9-21.el6
rubygem-smart_proxy_openscap
Red Hat:satellite:6.1::el6
 before 0:0.5.3.9-2.el6sat
0:0.5.3.9-2.el6sat
satellite
Red Hat:satellite:6.1::el6
 before 0:6.2.14-4.0.el6sat
0:6.2.14-4.0.el6sat
satellite-capsule
Red Hat:satellite:6.1::el6
 before 0:6.2.14-4.0.el6sat
0:6.2.14-4.0.el6sat
satellite-cli
Red Hat:satellite:6.1::el6
 before 0:6.2.14-4.0.el6sat
0:6.2.14-4.0.el6sat
satellite-debug-tools
Red Hat:satellite:6.1::el6
 before 0:6.2.14-4.0.el6sat
0:6.2.14-4.0.el6sat
tfm-rubygem-foreman_theme_satellite
Red Hat:satellite:6.1::el6
 before 0:0.1.47.2-1.el6sat
0:0.1.47.2-1.el6sat
tfm-rubygem-katello
Red Hat:satellite:6.1::el6
 before 0:3.0.0.162-1.el6sat
0:3.0.0.162-1.el6sat
foreman
Red Hat:satellite_capsule:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-debug
Red Hat:satellite_capsule:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-installer
Red Hat:satellite_capsule:6.2::el7
 before 1:1.11.0.18-1.el7sat
1:1.11.0.18-1.el7sat
foreman-installer-katello
Red Hat:satellite_capsule:6.2::el7
 before 0:3.0.0.101-1.el7sat
0:3.0.0.101-1.el7sat
katello
Red Hat:satellite_capsule:6.2::el7
 before 0:3.0.0-33.el7sat
0:3.0.0-33.el7sat
katello-capsule
Red Hat:satellite_capsule:6.2::el7
 before 0:3.0.0-33.el7sat
0:3.0.0-33.el7sat
katello-debug
Red Hat:satellite_capsule:6.2::el7
 before 0:3.0.0-33.el7sat
0:3.0.0-33.el7sat
katello-installer-base
Red Hat:satellite_capsule:6.2::el7
 before 0:3.0.0.101-1.el7sat
0:3.0.0.101-1.el7sat
katello-service
Red Hat:satellite_capsule:6.2::el7
 before 0:3.0.0-33.el7sat
0:3.0.0-33.el7sat
libqpid-dispatch
Red Hat:satellite_capsule:6.2::el7
 before 0:0.4-27.el7sat
0:0.4-27.el7sat
pulp
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
pulp-admin-client
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
pulp-nodes-child
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
pulp-nodes-common
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
pulp-nodes-parent
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
pulp-puppet
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.2-1.el7sat
0:2.8.7.2-1.el7sat
pulp-puppet-admin-extensions
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.2-1.el7sat
0:2.8.7.2-1.el7sat
pulp-puppet-plugins
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.2-1.el7sat
0:2.8.7.2-1.el7sat
pulp-selinux
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
pulp-server
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-agent-lib
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-bindings
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-client-lib
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-common
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-oid_validation
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-puppet-common
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.2-1.el7sat
0:2.8.7.2-1.el7sat
python-pulp-repoauth
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-streamer
Red Hat:satellite_capsule:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-qpid-proton
Red Hat:satellite_capsule:6.2::el7
 before 0:0.9-21.el7
0:0.9-21.el7
python-twisted-web
Red Hat:satellite_capsule:6.2::el7
 before 0:12.1.0-5.el7_2
0:12.1.0-5.el7_2
qpid-dispatch
Red Hat:satellite_capsule:6.2::el7
 before 0:0.4-27.el7sat
0:0.4-27.el7sat
qpid-dispatch-debuginfo
Red Hat:satellite_capsule:6.2::el7
 before 0:0.4-27.el7sat
0:0.4-27.el7sat
qpid-dispatch-router
Red Hat:satellite_capsule:6.2::el7
 before 0:0.4-27.el7sat
0:0.4-27.el7sat
qpid-dispatch-tools
Red Hat:satellite_capsule:6.2::el7
 before 0:0.4-27.el7sat
0:0.4-27.el7sat
qpid-proton
Red Hat:satellite_capsule:6.2::el7
 before 0:0.9-21.el7
0:0.9-21.el7
qpid-proton-c
Red Hat:satellite_capsule:6.2::el7
 before 0:0.9-21.el7
0:0.9-21.el7
qpid-proton-debuginfo
Red Hat:satellite_capsule:6.2::el7
 before 0:0.9-21.el7
0:0.9-21.el7
rubygem-smart_proxy_openscap
Red Hat:satellite_capsule:6.2::el7
 before 0:0.5.3.9-2.el7sat
0:0.5.3.9-2.el7sat
satellite
Red Hat:satellite_capsule:6.2::el7
 before 0:6.2.14-4.0.el7sat
0:6.2.14-4.0.el7sat
satellite-capsule
Red Hat:satellite_capsule:6.2::el7
 before 0:6.2.14-4.0.el7sat
0:6.2.14-4.0.el7sat
satellite-debug-tools
Red Hat:satellite_capsule:6.2::el7
 before 0:6.2.14-4.0.el7sat
0:6.2.14-4.0.el7sat
candlepin
Red Hat:satellite:6.2::el7
 before 0:0.9.54.26-1.el7
0:0.9.54.26-1.el7
candlepin-selinux
Red Hat:satellite:6.2::el7
 before 0:0.9.54.26-1.el7
0:0.9.54.26-1.el7
foreman
Red Hat:satellite:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-compute
Red Hat:satellite:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-debug
Red Hat:satellite:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-ec2
Red Hat:satellite:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-gce
Red Hat:satellite:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-installer
Red Hat:satellite:6.2::el7
 before 1:1.11.0.18-1.el7sat
1:1.11.0.18-1.el7sat
foreman-installer-katello
Red Hat:satellite:6.2::el7
 before 0:3.0.0.101-1.el7sat
0:3.0.0.101-1.el7sat
foreman-libvirt
Red Hat:satellite:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-openstack
Red Hat:satellite:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-ovirt
Red Hat:satellite:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-postgresql
Red Hat:satellite:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-rackspace
Red Hat:satellite:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
foreman-vmware
Red Hat:satellite:6.2::el7
 before 0:1.11.0.86-1.el7sat
0:1.11.0.86-1.el7sat
katello
Red Hat:satellite:6.2::el7
 before 0:3.0.0-33.el7sat
0:3.0.0-33.el7sat
katello-capsule
Red Hat:satellite:6.2::el7
 before 0:3.0.0-33.el7sat
0:3.0.0-33.el7sat
katello-common
Red Hat:satellite:6.2::el7
 before 0:3.0.0-33.el7sat
0:3.0.0-33.el7sat
katello-debug
Red Hat:satellite:6.2::el7
 before 0:3.0.0-33.el7sat
0:3.0.0-33.el7sat
katello-installer-base
Red Hat:satellite:6.2::el7
 before 0:3.0.0.101-1.el7sat
0:3.0.0.101-1.el7sat
katello-service
Red Hat:satellite:6.2::el7
 before 0:3.0.0-33.el7sat
0:3.0.0-33.el7sat
libqpid-dispatch
Red Hat:satellite:6.2::el7
 before 0:0.4-27.el7sat
0:0.4-27.el7sat
pulp
Red Hat:satellite:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
pulp-admin-client
Red Hat:satellite:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
pulp-puppet
Red Hat:satellite:6.2::el7
 before 0:2.8.7.2-1.el7sat
0:2.8.7.2-1.el7sat
pulp-puppet-admin-extensions
Red Hat:satellite:6.2::el7
 before 0:2.8.7.2-1.el7sat
0:2.8.7.2-1.el7sat
pulp-puppet-plugins
Red Hat:satellite:6.2::el7
 before 0:2.8.7.2-1.el7sat
0:2.8.7.2-1.el7sat
pulp-puppet-tools
Red Hat:satellite:6.2::el7
 before 0:2.8.7.2-1.el7sat
0:2.8.7.2-1.el7sat
pulp-selinux
Red Hat:satellite:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
pulp-server
Red Hat:satellite:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-agent-lib
Red Hat:satellite:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-bindings
Red Hat:satellite:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-client-lib
Red Hat:satellite:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-common
Red Hat:satellite:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-oid_validation
Red Hat:satellite:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-puppet-common
Red Hat:satellite:6.2::el7
 before 0:2.8.7.2-1.el7sat
0:2.8.7.2-1.el7sat
python-pulp-repoauth
Red Hat:satellite:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-pulp-streamer
Red Hat:satellite:6.2::el7
 before 0:2.8.7.18-1.el7sat
0:2.8.7.18-1.el7sat
python-qpid-proton
Red Hat:satellite:6.2::el7
 before 0:0.9-21.el7
0:0.9-21.el7
python-twisted-web
Red Hat:satellite:6.2::el7
 before 0:12.1.0-5.el7_2
0:12.1.0-5.el7_2
qpid-dispatch
Red Hat:satellite:6.2::el7
 before 0:0.4-27.el7sat
0:0.4-27.el7sat
qpid-dispatch-debuginfo
Red Hat:satellite:6.2::el7
 before 0:0.4-27.el7sat
0:0.4-27.el7sat
qpid-dispatch-router
Red Hat:satellite:6.2::el7
 before 0:0.4-27.el7sat
0:0.4-27.el7sat
qpid-dispatch-tools
Red Hat:satellite:6.2::el7
 before 0:0.4-27.el7sat
0:0.4-27.el7sat
qpid-proton
Red Hat:satellite:6.2::el7
 before 0:0.9-21.el7
0:0.9-21.el7
qpid-proton-c
Red Hat:satellite:6.2::el7
 before 0:0.9-21.el7
0:0.9-21.el7
qpid-proton-debuginfo
Red Hat:satellite:6.2::el7
 before 0:0.9-21.el7
0:0.9-21.el7
rubygem-smart_proxy_openscap
Red Hat:satellite:6.2::el7
 before 0:0.5.3.9-2.el7sat
0:0.5.3.9-2.el7sat
satellite
Red Hat:satellite:6.2::el7
 before 0:6.2.14-4.0.el7sat
0:6.2.14-4.0.el7sat
satellite-capsule
Red Hat:satellite:6.2::el7
 before 0:6.2.14-4.0.el7sat
0:6.2.14-4.0.el7sat
satellite-cli
Red Hat:satellite:6.2::el7
 before 0:6.2.14-4.0.el7sat
0:6.2.14-4.0.el7sat
satellite-debug-tools
Red Hat:satellite:6.2::el7
 before 0:6.2.14-4.0.el7sat
0:6.2.14-4.0.el7sat
tfm-rubygem-foreman_theme_satellite
Red Hat:satellite:6.2::el7
 before 0:0.1.47.2-1.el7sat
0:0.1.47.2-1.el7sat
tfm-rubygem-katello
Red Hat:satellite:6.2::el7
 before 0:3.0.0.162-1.el7sat
0:3.0.0.162-1.el7sat
tfm-rubygem-katello_ostree
Red Hat:satellite:6.2::el7
 before 0:3.0.0.162-1.el7sat
0:3.0.0.162-1.el7sat
python-Twisted
SUSE:Linux Enterprise Module for Web and Scripting 12
 before 15.2.1-8.1
15.2.1-8.1
python-Twisted
SUSE:Enterprise Storage 3
 before 15.2.1-8.1
15.2.1-8.1
python-Twisted
SUSE:Enterprise Storage 4
 before 15.2.1-8.1
15.2.1-8.1
twisted
Ubuntu:14.04:LTS
 before 13.2.0-1ubuntu1.2, plus listed versions
13.0.0-1ubuntu113.2.0-1ubuntu1
13.2.0-1ubuntu1.2
twisted
Ubuntu:16.04:LTS
 before 16.0.0-1ubuntu0.2, plus listed versions
15.2.1-1ubuntu215.5.0-115.5.0-215.5.0-2ubuntu115.5.0-4
Show 5 moreShow less
16.0.0~pre1-116.0.0~pre1-1ubuntu116.0.0~pre1-2ubuntu116.0.0~pre1-316.0.0-1
16.0.0-1ubuntu0.2
python-Twisted
openSUSE:Tumbleweed
 before 16.4.1-1.2
16.4.1-1.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-1000111 is a medium vulnerability (CVSS 5.3) in Twisted, published July 18, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.76%, the 86th percentile. Fixed in twisted 16.3.1.

References

Show 37 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open