python-tornado vulnerabilities (Mageia)
16 vulnerabilities.
-
python-tornadoMageia tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) 7.5 High -
python-tornadoMageia Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient 7.7 High -
python-tornadoMageia Tornado: Out-of-bounds memory access in C extension 5.3 Medium -
python-tornadoMageia Tornado has incomplete validation of cookie attributes 7.2 High -
python-tornadoMageia Tornado has a DoS due to too many multipart parts 8.7 High -
python-tornadoMageia Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters 7.5 High -
python-tornadoMageia Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing 7.5 High -
python-tornadoMageia Tornado vulnerable to Header Injection and XSS via reason argument 5.4 Medium -
python-tornadoMageia Tornado vulnerable to excessive logging caused by malformed multipart form data 7.5 High -
python-tornadoMageia Tornado has HTTP cookie parsing DoS vulnerability 7.5 High -
python-tornadoMageia Open redirect in Tornado 6.1 Medium -
python-tornadoMageia Updated python-tornado package fixes security vulnerability No score -
python-tornadoMageia Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack) 6.5 Medium -
python-tornadoMageia Updated python3 and related packages fix security vulnerabilities and prevent an error No score -
python-tornadoMageia The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly... 4.3 Medium -
python-tornadoMageia Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,... 4.3 Medium