Search for packages
Package details: pkg:deb/debian/python-tornado@1.0.1-1
purl pkg:deb/debian/python-tornado@1.0.1-1
Next non-vulnerable version 6.2.0-3+deb12u2
Latest non-vulnerable version 6.4.2-3
Risk 4.0
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-17gc-ucef-aaah
Aliases:
CVE-2012-2374
GHSA-f7fv-v9rh-prvc
PYSEC-2012-5
CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.
2.3-2
Affected by 4 other vulnerabilities.
VCID-1ucn-3yzf-73c1
Aliases:
CVE-2024-52804
GHSA-8w49-h785-mj3c
Tornado has an HTTP cookie parsing DoS vulnerability
6.2.0-3+deb12u1
Affected by 1 other vulnerability.
6.4.2-1
Affected by 0 other vulnerabilities.
VCID-9bab-qq7f-aaah
Aliases:
CVE-2023-28370
GHSA-hj3f-6gcp-jg8j
PYSEC-2023-75
Open redirect in Tornado
6.2.0-3+deb12u1
Affected by 1 other vulnerability.
6.3.2-1
Affected by 0 other vulnerabilities.
6.4.0-1
Affected by 0 other vulnerabilities.
6.4.1-2
Affected by 0 other vulnerabilities.
6.4.1-3
Affected by 0 other vulnerabilities.
6.4.2-1
Affected by 0 other vulnerabilities.
VCID-gvgj-by2z-aaar
Aliases:
CVE-2014-9720
GHSA-8vpw-mgpf-mpvv
PYSEC-2020-213
Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.
3.2.2-1.1
Affected by 2 other vulnerabilities.
VCID-us5b-bv9a-aaaa
Aliases:
CVE-2013-2099
Uncontrolled Resource Consumption Algorithmic complexity vulnerability in the `ssl.match_hostname` function and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.
3.2.2-1.1
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T18:09:07.192267+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T17:39:54.364698+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:38:14.804544+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T12:30:16.386575+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T01:08:14.399272+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar None 36.1.3
2025-06-20T23:29:41.357611+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah None 36.1.3
2025-06-20T21:00:11.867648+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa None 36.1.3
2025-06-08T10:40:34.391853+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T10:13:34.287479+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:32:46.206571+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:29:47.365734+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T18:30:51.650339+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar None 36.1.0
2025-06-07T16:52:36.315831+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah None 36.1.0
2025-06-07T14:27:25.726767+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa None 36.1.0
2025-04-13T02:44:47.599875+00:00 Debian Oval Importer Affected by VCID-9bab-qq7f-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-13T02:42:12.364138+00:00 Debian Oval Importer Affected by VCID-1ucn-3yzf-73c1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T22:40:05.766026+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:33:51.935000+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T16:22:17.775673+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T15:54:23.573987+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T07:04:11.899731+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:01:03.151935+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T17:08:32.027055+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar None 36.0.0
2025-04-07T15:25:28.505061+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah None 36.0.0
2025-04-07T12:59:44.368712+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa None 36.0.0
2024-12-11T08:23:11.567846+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-11-29T00:19:03.869220+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-10-15T06:49:12.603546+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-14T08:19:46.647105+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-05T04:51:46.871554+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1
2024-09-21T07:38:42.272714+00:00 Debian Oval Importer Affected by VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1