Search for packages
Package details: pkg:deb/debian/python-tornado@1.0.1-1%2Bdeb6u1
purl pkg:deb/debian/python-tornado@1.0.1-1%2Bdeb6u1
Next non-vulnerable version 6.2.0-3+deb12u2
Latest non-vulnerable version 6.4.2-3
Risk 4.0
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-17gc-ucef-aaah
Aliases:
CVE-2012-2374
GHSA-f7fv-v9rh-prvc
PYSEC-2012-5
CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.
2.3-2
Affected by 4 other vulnerabilities.
VCID-1ucn-3yzf-73c1
Aliases:
CVE-2024-52804
GHSA-8w49-h785-mj3c
Tornado has an HTTP cookie parsing DoS vulnerability
6.2.0-3+deb12u1
Affected by 1 other vulnerability.
6.4.2-1
Affected by 0 other vulnerabilities.
VCID-9bab-qq7f-aaah
Aliases:
CVE-2023-28370
GHSA-hj3f-6gcp-jg8j
PYSEC-2023-75
Open redirect in Tornado
6.2.0-3+deb12u1
Affected by 1 other vulnerability.
6.3.2-1
Affected by 0 other vulnerabilities.
6.4.0-1
Affected by 0 other vulnerabilities.
6.4.1-2
Affected by 0 other vulnerabilities.
6.4.1-3
Affected by 0 other vulnerabilities.
6.4.2-1
Affected by 0 other vulnerabilities.
VCID-gvgj-by2z-aaar
Aliases:
CVE-2014-9720
GHSA-8vpw-mgpf-mpvv
PYSEC-2020-213
Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.
3.2.2-1.1
Affected by 2 other vulnerabilities.
VCID-us5b-bv9a-aaaa
Aliases:
CVE-2013-2099
Uncontrolled Resource Consumption Algorithmic complexity vulnerability in the `ssl.match_hostname` function and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.
3.2.2-1.1
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T18:09:07.194415+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T17:39:54.368009+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:38:14.806259+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T12:30:16.388617+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T01:08:14.401402+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar None 36.1.3
2025-06-20T23:29:41.359424+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah None 36.1.3
2025-06-20T21:00:11.869430+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa None 36.1.3
2025-06-08T10:40:34.393573+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T10:13:34.289368+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:32:46.208235+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:29:47.367381+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T18:30:51.652100+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar None 36.1.0
2025-06-07T16:52:36.317718+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah None 36.1.0
2025-06-07T14:27:25.729248+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa None 36.1.0
2025-04-13T02:44:47.605466+00:00 Debian Oval Importer Affected by VCID-9bab-qq7f-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-13T02:42:12.369712+00:00 Debian Oval Importer Affected by VCID-1ucn-3yzf-73c1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T22:40:05.770413+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:33:51.939473+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T16:22:17.780462+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T15:54:23.578574+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T07:04:11.904689+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:01:03.156780+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T17:08:32.032493+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar None 36.0.0
2025-04-07T15:25:28.509411+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah None 36.0.0
2025-04-07T12:59:44.373071+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa None 36.0.0
2024-12-11T08:23:11.573560+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-11-29T00:19:03.874438+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-10-15T06:49:12.607886+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-14T08:19:46.652573+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-05T04:51:46.876904+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1
2024-09-21T07:38:42.278958+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1