Search for packages
Package details: pkg:deb/debian/python-tornado@2.3-2
purl pkg:deb/debian/python-tornado@2.3-2
Next non-vulnerable version 6.2.0-3+deb12u2
Latest non-vulnerable version 6.4.2-3
Risk 4.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-1ucn-3yzf-73c1
Aliases:
CVE-2024-52804
GHSA-8w49-h785-mj3c
Tornado has an HTTP cookie parsing DoS vulnerability
6.2.0-3+deb12u1
Affected by 1 other vulnerability.
6.4.2-1
Affected by 0 other vulnerabilities.
VCID-9bab-qq7f-aaah
Aliases:
CVE-2023-28370
GHSA-hj3f-6gcp-jg8j
PYSEC-2023-75
Open redirect in Tornado
6.2.0-3+deb12u1
Affected by 1 other vulnerability.
6.3.2-1
Affected by 0 other vulnerabilities.
6.4.0-1
Affected by 0 other vulnerabilities.
6.4.1-2
Affected by 0 other vulnerabilities.
6.4.1-3
Affected by 0 other vulnerabilities.
6.4.2-1
Affected by 0 other vulnerabilities.
VCID-gvgj-by2z-aaar
Aliases:
CVE-2014-9720
GHSA-8vpw-mgpf-mpvv
PYSEC-2020-213
Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.
3.2.2-1.1
Affected by 2 other vulnerabilities.
VCID-us5b-bv9a-aaaa
Aliases:
CVE-2013-2099
Uncontrolled Resource Consumption Algorithmic complexity vulnerability in the `ssl.match_hostname` function and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.
3.2.2-1.1
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-17gc-ucef-aaah CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input. CVE-2012-2374
GHSA-f7fv-v9rh-prvc
PYSEC-2012-5

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T18:09:07.196449+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T17:39:54.371104+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:38:14.807869+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T12:30:16.390514+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T01:08:14.403406+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar None 36.1.3
2025-06-20T23:29:41.361042+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah None 36.1.3
2025-06-20T21:00:11.871108+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa None 36.1.3
2025-06-08T10:40:34.395145+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T10:13:34.291182+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:32:46.209788+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:29:47.369354+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T18:30:51.653638+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar None 36.1.0
2025-06-07T16:52:36.319523+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah None 36.1.0
2025-06-07T14:27:25.731009+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa None 36.1.0
2025-04-13T02:44:47.611455+00:00 Debian Oval Importer Affected by VCID-9bab-qq7f-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-13T02:42:12.375361+00:00 Debian Oval Importer Affected by VCID-1ucn-3yzf-73c1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T22:40:05.775007+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:33:51.944166+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T16:22:17.785696+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T15:54:23.583664+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T07:04:11.909680+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:01:03.161698+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T17:08:32.037943+00:00 Debian Oval Importer Affected by VCID-gvgj-by2z-aaar None 36.0.0
2025-04-07T15:25:28.513907+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah None 36.0.0
2025-04-07T12:59:44.377860+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa None 36.0.0
2024-12-11T08:23:11.578253+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-11-29T00:19:03.879508+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-10-15T06:49:12.612623+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-14T08:19:46.657647+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-05T04:51:46.882229+00:00 Debian Oval Importer Affected by VCID-us5b-bv9a-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1
2024-09-21T07:38:42.285211+00:00 Debian Oval Importer Fixing VCID-17gc-ucef-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1