Vulnerability-Lookup

USN-8952-1 (UBUNTU-CVE-2023-54397)

Vulnerability from osv_ubuntu – Published: 2026-10-22 12:07 – Updated: 2026-10-22 12:07 – Source website

Summary

python-tornado vulnerabilities

Details

It was discovered that Tornado did not properly handle certain HTTP requests and network inputs. An attacker could possibly use these issues to cause a denial of service, expose sensitive information, or bypass access controls.

(CVE-2023-54397, CVE-2024-14029, CVE-2026-91990, CVE-2026-91992, CVE-2026-103262, CVE-2026-103263)

References

URL

Type

	https://ubuntu.com/security/notices/USN-8952-1	ADVISORY
	https://ubuntu.com/security/CVE-2023-54397	REPORT
	https://ubuntu.com/security/CVE-2024-14029	REPORT
	https://ubuntu.com/security/CVE-2026-91990	REPORT
	https://ubuntu.com/security/CVE-2026-91992	REPORT
	https://ubuntu.com/security/CVE-2026-103262	REPORT
	https://ubuntu.com/security/CVE-2026-103263	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-54397",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-14029",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-91990",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-91992",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-103262",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-103263",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.2.1-1ubuntu3.1+esm4?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.1-1ubuntu3.1+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.1-1ubuntu2",
        "4.2.1-1ubuntu3",
        "4.2.1-1ubuntu3.1",
        "4.2.1-1ubuntu3.1+esm1",
        "4.2.1-1ubuntu3.1+esm2",
        "4.2.1-1ubuntu3.1+esm3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-54397",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-14029",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-91990",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-91992",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-103262",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-103263",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.5.3-1ubuntu0.2+esm4?arch=source\u0026distro=esm-apps/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-1ubuntu0.2+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.5.1-2.1~build2",
        "4.5.2-1",
        "4.5.3-1",
        "4.5.3-1ubuntu0.1",
        "4.5.3-1ubuntu0.2",
        "4.5.3-1ubuntu0.2+esm1",
        "4.5.3-1ubuntu0.2+esm2",
        "4.5.3-1ubuntu0.2+esm3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [],
          "ecosystem": "Ubuntu:Pro:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.0.3+really5.1.1-3ubuntu0.1~esm7"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.0.3+really5.1.1-3ubuntu0.1~esm7?arch=source\u0026distro=esm-apps/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.3+really5.1.1-3ubuntu0.1~esm7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.1.1-4ubuntu1",
        "5.1.1-4ubuntu5",
        "6.0.3+really5.1.1-2",
        "6.0.3+really5.1.1-2build1",
        "6.0.3+really5.1.1-2build2",
        "6.0.3+really5.1.1-3",
        "6.0.3+really5.1.1-3ubuntu0.1~esm1",
        "6.0.3+really5.1.1-3ubuntu0.1~esm3",
        "6.0.3+really5.1.1-3ubuntu0.1~esm5"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-54397",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-14029",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-91990",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-91992",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-103263",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.1.0-3ubuntu0.1~esm6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:22.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.1.0-3ubuntu0.1~esm6?arch=source\u0026distro=esm-apps/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.0-3ubuntu0.1~esm6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.1.0-1build1",
        "6.1.0-2",
        "6.1.0-3",
        "6.1.0-3build1",
        "6.1.0-3ubuntu0.1~esm1",
        "6.1.0-3ubuntu0.1~esm2",
        "6.1.0-3ubuntu0.1~esm4",
        "6.1.0-3ubuntu0.1~esm5"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2024-14029",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-91990",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-91992",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-103262",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-103263",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:24.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.4.0-1ubuntu0.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.4.0-1ubuntu0.6?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.0-1ubuntu0.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.3.2-1",
        "6.4.0-0ubuntu1",
        "6.4.0-1",
        "6.4.0-1build1",
        "6.4.0-1ubuntu0.1",
        "6.4.0-1ubuntu0.2",
        "6.4.0-1ubuntu0.4",
        "6.4.0-1ubuntu0.5"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [],
          "ecosystem": "Ubuntu:26.10"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.5.5-5ubuntu1.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.10",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.5.5-5ubuntu1.1?arch=source\u0026distro=stonking"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.5.5-5ubuntu1.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.4-0.1",
        "6.5.5-2",
        "6.5.5-4",
        "6.5.5-5"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-91990",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-91992",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-103262",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-103263",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:26.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.5.4-0.1ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.5.4-0.1ubuntu0.2?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.5.4-0.1ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.4.2-3",
        "6.5.2-3",
        "6.5.4-0.1",
        "6.5.4-0.1ubuntu0.1"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that Tornado did not properly handle certain HTTP requests\nand network inputs. An attacker could possibly use these issues to cause a\ndenial of service, expose sensitive information, or bypass access controls.\n\n(CVE-2023-54397, CVE-2024-14029, CVE-2026-91990, CVE-2026-91992,\nCVE-2026-103262, CVE-2026-103263)",
  "id": "USN-8952-1",
  "modified": "2026-10-22T12:07:23Z",
  "published": "2026-10-22T12:07:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8952-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-54397"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-14029"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-91990"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-91992"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-103262"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-103263"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "python-tornado vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2023-54397",
    "UBUNTU-CVE-2024-14029",
    "UBUNTU-CVE-2026-91990",
    "UBUNTU-CVE-2026-91992",
    "UBUNTU-CVE-2026-103262",
    "UBUNTU-CVE-2026-103263"
  ]
}

UBUNTU-CVE-2023-54397 (CVE-2023-54397)

Vulnerability from osv_ubuntu – Published: 2026-09-15 16:17 – Updated: 2026-10-22 20:12 – Source website

Details

Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. Attackers can send crafted HTTP requests with these characters to bypass proxy validation and smuggle requests when deployed behind certain proxies.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N

9.0 (Critical)


                    
                      CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2023-54397	REPORT
	https://www.cve.org/CVERecord?id=CVE-2023-54397	REPORT
	https://ubuntu.com/security/notices/USN-8952-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.2.1-1ubuntu3.1+esm4?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.1-1ubuntu3.1+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.1-1ubuntu2",
        "4.2.1-1ubuntu3",
        "4.2.1-1ubuntu3.1",
        "4.2.1-1ubuntu3.1+esm1",
        "4.2.1-1ubuntu3.1+esm2",
        "4.2.1-1ubuntu3.1+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.5.3-1ubuntu0.2+esm4?arch=source\u0026distro=esm-apps/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-1ubuntu0.2+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.5.1-2.1~build2",
        "4.5.2-1",
        "4.5.3-1",
        "4.5.3-1ubuntu0.1",
        "4.5.3-1ubuntu0.2",
        "4.5.3-1ubuntu0.2+esm1",
        "4.5.3-1ubuntu0.2+esm2",
        "4.5.3-1ubuntu0.2+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.1.0-3ubuntu0.1~esm6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:22.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.1.0-3ubuntu0.1~esm6?arch=source\u0026distro=esm-apps/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.0-3ubuntu0.1~esm6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.1.0-1build1",
        "6.1.0-2",
        "6.1.0-3",
        "6.1.0-3build1",
        "6.1.0-3ubuntu0.1~esm1",
        "6.1.0-3ubuntu0.1~esm2",
        "6.1.0-3ubuntu0.1~esm4",
        "6.1.0-3ubuntu0.1~esm5"
      ]
    }
  ],
  "aliases": [],
  "details": "Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. Attackers can send crafted HTTP requests with these characters to bypass proxy validation and smuggle requests when deployed behind certain proxies.",
  "id": "UBUNTU-CVE-2023-54397",
  "modified": "2026-10-22T20:12:40Z",
  "published": "2026-09-15T16:17:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-54397"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-54397"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8952-1"
    }
  ],
  "related": [
    "USN-8952-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
      "type": "CVSS_V4"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2023-54397"
  ]
}

UBUNTU-CVE-2024-14029 (CVE-2024-14029)

Vulnerability from osv_ubuntu – Published: 2026-09-15 16:17 – Updated: 2026-10-22 20:12 – Source website

Details

Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked headers, treating requests as having no message body and parsing the chunked body as a subsequent request. Attackers can exploit this inconsistency when Tornado is deployed behind proxies to perform HTTP request smuggling, enabling access control bypass, cache poisoning, or connection desynchronization.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N

9.0 (Critical)


                    
                      CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2024-14029	REPORT
	https://www.cve.org/CVERecord?id=CVE-2024-14029	REPORT
	https://ubuntu.com/security/notices/USN-8952-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.2.1-1ubuntu3.1+esm4?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.1-1ubuntu3.1+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.1-1ubuntu2",
        "4.2.1-1ubuntu3",
        "4.2.1-1ubuntu3.1",
        "4.2.1-1ubuntu3.1+esm1",
        "4.2.1-1ubuntu3.1+esm2",
        "4.2.1-1ubuntu3.1+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.5.3-1ubuntu0.2+esm4?arch=source\u0026distro=esm-apps/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-1ubuntu0.2+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.5.1-2.1~build2",
        "4.5.2-1",
        "4.5.3-1",
        "4.5.3-1ubuntu0.1",
        "4.5.3-1ubuntu0.2",
        "4.5.3-1ubuntu0.2+esm1",
        "4.5.3-1ubuntu0.2+esm2",
        "4.5.3-1ubuntu0.2+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.1.0-3ubuntu0.1~esm6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:22.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.1.0-3ubuntu0.1~esm6?arch=source\u0026distro=esm-apps/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.0-3ubuntu0.1~esm6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.1.0-1build1",
        "6.1.0-2",
        "6.1.0-3",
        "6.1.0-3build1",
        "6.1.0-3ubuntu0.1~esm1",
        "6.1.0-3ubuntu0.1~esm2",
        "6.1.0-3ubuntu0.1~esm4",
        "6.1.0-3ubuntu0.1~esm5"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.4.0-1ubuntu0.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.4.0-1ubuntu0.6?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.0-1ubuntu0.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.3.2-1",
        "6.4.0-0ubuntu1",
        "6.4.0-1",
        "6.4.0-1build1",
        "6.4.0-1ubuntu0.1",
        "6.4.0-1ubuntu0.2",
        "6.4.0-1ubuntu0.4",
        "6.4.0-1ubuntu0.5"
      ]
    }
  ],
  "aliases": [],
  "details": "Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked headers, treating requests as having no message body and parsing the chunked body as a subsequent request. Attackers can exploit this inconsistency when Tornado is deployed behind proxies to perform HTTP request smuggling, enabling access control bypass, cache poisoning, or connection desynchronization.",
  "id": "UBUNTU-CVE-2024-14029",
  "modified": "2026-10-22T20:12:49Z",
  "published": "2026-09-15T16:17:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-14029"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-14029"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8952-1"
    }
  ],
  "related": [
    "USN-8952-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
      "type": "CVSS_V4"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2024-14029"
  ]
}

UBUNTU-CVE-2026-103262 (CVE-2026-103262)

Vulnerability from osv_ubuntu – Published: 2026-10-01 11:17 – Updated: 2026-10-22 20:44 – Source website

Details

Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory without size limits, causing the application process to be killed by out-of-memory conditions.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.7 (High)


                    
                      CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-103262	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-103262	REPORT
	https://github.com/tornadoweb/tornado/security/ad…	REPORT
	https://github.com/tornadoweb/tornado/commit/e412…	REPORT
	https://www.vulncheck.com/advisories/tornado-befo…	REPORT
	https://ubuntu.com/security/notices/USN-8952-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.2.1-1ubuntu3.1+esm4?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.1-1ubuntu3.1+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.1-1ubuntu2",
        "4.2.1-1ubuntu3",
        "4.2.1-1ubuntu3.1",
        "4.2.1-1ubuntu3.1+esm1",
        "4.2.1-1ubuntu3.1+esm2",
        "4.2.1-1ubuntu3.1+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.5.3-1ubuntu0.2+esm4?arch=source\u0026distro=esm-apps/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-1ubuntu0.2+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.5.1-2.1~build2",
        "4.5.2-1",
        "4.5.3-1",
        "4.5.3-1ubuntu0.1",
        "4.5.3-1ubuntu0.2",
        "4.5.3-1ubuntu0.2+esm1",
        "4.5.3-1ubuntu0.2+esm2",
        "4.5.3-1ubuntu0.2+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.1.0-3ubuntu0.1~esm6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:22.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.1.0-3ubuntu0.1~esm6?arch=source\u0026distro=esm-apps/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.1.0-1build1",
        "6.1.0-2",
        "6.1.0-3",
        "6.1.0-3build1",
        "6.1.0-3ubuntu0.1~esm1",
        "6.1.0-3ubuntu0.1~esm2",
        "6.1.0-3ubuntu0.1~esm4",
        "6.1.0-3ubuntu0.1~esm5",
        "6.1.0-3ubuntu0.1~esm6"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.4.0-1ubuntu0.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.4.0-1ubuntu0.6?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.0-1ubuntu0.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.3.2-1",
        "6.4.0-0ubuntu1",
        "6.4.0-1",
        "6.4.0-1build1",
        "6.4.0-1ubuntu0.1",
        "6.4.0-1ubuntu0.2",
        "6.4.0-1ubuntu0.4",
        "6.4.0-1ubuntu0.5"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.5.4-0.1ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.5.4-0.1ubuntu0.2?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.5.4-0.1ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.4.2-3",
        "6.5.2-3",
        "6.5.4-0.1",
        "6.5.4-0.1ubuntu0.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory without size limits, causing the application process to be killed by out-of-memory conditions.",
  "id": "UBUNTU-CVE-2026-103262",
  "modified": "2026-10-22T20:44:13Z",
  "published": "2026-10-01T11:17:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-103262"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103262"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/tornadoweb/tornado/security/advisories/GHSA-chx6-46f5-w4vp"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/tornadoweb/tornado/commit/e412435febba4569c552c5c9054f1bf92bd171a9"
    },
    {
      "type": "REPORT",
      "url": "https://www.vulncheck.com/advisories/tornado-before-6.5.9-denial-of-service-via-curlasynchttpclient"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8952-1"
    }
  ],
  "related": [
    "USN-8952-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-103262"
  ]
}

UBUNTU-CVE-2026-103263 (CVE-2026-103263)

Vulnerability from osv_ubuntu – Published: 2026-10-01 11:17 – Updated: 2026-10-22 20:44 – Source website

Details

Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirming the resolved target stays within it. When a symlink pointing outside the static directory exists inside it, unauthenticated attackers can request it to read files such as configuration files, private keys, and application secrets accessible to the process user.

Severity

5.9 (Medium)


                    
                      CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

8.2 (High)


                    
                      CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-103263	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-103263	REPORT
	https://github.com/tornadoweb/tornado/security/ad…	REPORT
	https://github.com/tornadoweb/tornado/commit/437a…	REPORT
	https://www.vulncheck.com/advisories/tornado-befo…	REPORT
	https://ubuntu.com/security/notices/USN-8952-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.2.1-1ubuntu3.1+esm4?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.1-1ubuntu3.1+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.1-1ubuntu2",
        "4.2.1-1ubuntu3",
        "4.2.1-1ubuntu3.1",
        "4.2.1-1ubuntu3.1+esm1",
        "4.2.1-1ubuntu3.1+esm2",
        "4.2.1-1ubuntu3.1+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.5.3-1ubuntu0.2+esm4?arch=source\u0026distro=esm-apps/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-1ubuntu0.2+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.5.1-2.1~build2",
        "4.5.2-1",
        "4.5.3-1",
        "4.5.3-1ubuntu0.1",
        "4.5.3-1ubuntu0.2",
        "4.5.3-1ubuntu0.2+esm1",
        "4.5.3-1ubuntu0.2+esm2",
        "4.5.3-1ubuntu0.2+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.1.0-3ubuntu0.1~esm6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:22.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.1.0-3ubuntu0.1~esm6?arch=source\u0026distro=esm-apps/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.0-3ubuntu0.1~esm6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.1.0-1build1",
        "6.1.0-2",
        "6.1.0-3",
        "6.1.0-3build1",
        "6.1.0-3ubuntu0.1~esm1",
        "6.1.0-3ubuntu0.1~esm2",
        "6.1.0-3ubuntu0.1~esm4",
        "6.1.0-3ubuntu0.1~esm5"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.4.0-1ubuntu0.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.4.0-1ubuntu0.6?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.0-1ubuntu0.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.3.2-1",
        "6.4.0-0ubuntu1",
        "6.4.0-1",
        "6.4.0-1build1",
        "6.4.0-1ubuntu0.1",
        "6.4.0-1ubuntu0.2",
        "6.4.0-1ubuntu0.4",
        "6.4.0-1ubuntu0.5"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.5.4-0.1ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.5.4-0.1ubuntu0.2?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.5.4-0.1ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.4.2-3",
        "6.5.2-3",
        "6.5.4-0.1",
        "6.5.4-0.1ubuntu0.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirming the resolved target stays within it. When a symlink pointing outside the static directory exists inside it, unauthenticated attackers can request it to read files such as configuration files, private keys, and application secrets accessible to the process user.",
  "id": "UBUNTU-CVE-2026-103263",
  "modified": "2026-10-22T20:44:13Z",
  "published": "2026-10-01T11:17:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-103263"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103263"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/tornadoweb/tornado/security/advisories/GHSA-c2m8-h5v5-343r"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/tornadoweb/tornado/commit/437ab5f76565403b3403438d2e555d11f8128d32"
    },
    {
      "type": "REPORT",
      "url": "https://www.vulncheck.com/advisories/tornado-before-6.5.9-staticfilehandler-path-traversal-via-symlink"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8952-1"
    }
  ],
  "related": [
    "USN-8952-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-103263"
  ]
}

UBUNTU-CVE-2026-91990 (CVE-2026-91990)

Vulnerability from osv_ubuntu – Published: 2026-09-15 16:17 – Updated: 2026-10-22 20:39 – Source website

Details

Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart data before validating the max_parts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and causing denial of service.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.7 (High)


                    
                      CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-91990	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-91990	REPORT
	https://github.com/tornadoweb/tornado/security/ad…	REPORT
	https://ubuntu.com/security/notices/USN-8952-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.2.1-1ubuntu3.1+esm4?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.1-1ubuntu3.1+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.1-1ubuntu2",
        "4.2.1-1ubuntu3",
        "4.2.1-1ubuntu3.1",
        "4.2.1-1ubuntu3.1+esm1",
        "4.2.1-1ubuntu3.1+esm2",
        "4.2.1-1ubuntu3.1+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.5.3-1ubuntu0.2+esm4?arch=source\u0026distro=esm-apps/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-1ubuntu0.2+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.5.1-2.1~build2",
        "4.5.2-1",
        "4.5.3-1",
        "4.5.3-1ubuntu0.1",
        "4.5.3-1ubuntu0.2",
        "4.5.3-1ubuntu0.2+esm1",
        "4.5.3-1ubuntu0.2+esm2",
        "4.5.3-1ubuntu0.2+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.1.0-3ubuntu0.1~esm6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:22.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.1.0-3ubuntu0.1~esm6?arch=source\u0026distro=esm-apps/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.0-3ubuntu0.1~esm6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.1.0-1build1",
        "6.1.0-2",
        "6.1.0-3",
        "6.1.0-3build1",
        "6.1.0-3ubuntu0.1~esm1",
        "6.1.0-3ubuntu0.1~esm2",
        "6.1.0-3ubuntu0.1~esm4",
        "6.1.0-3ubuntu0.1~esm5"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.4.0-1ubuntu0.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.4.0-1ubuntu0.6?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.0-1ubuntu0.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.3.2-1",
        "6.4.0-0ubuntu1",
        "6.4.0-1",
        "6.4.0-1build1",
        "6.4.0-1ubuntu0.1",
        "6.4.0-1ubuntu0.2",
        "6.4.0-1ubuntu0.4",
        "6.4.0-1ubuntu0.5"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.5.4-0.1ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.5.4-0.1ubuntu0.2?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.5.4-0.1ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.4.2-3",
        "6.5.2-3",
        "6.5.4-0.1",
        "6.5.4-0.1ubuntu0.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart data before validating the max_parts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and causing denial of service.",
  "id": "UBUNTU-CVE-2026-91990",
  "modified": "2026-10-22T20:39:57Z",
  "published": "2026-09-15T16:17:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-91990"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91990"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/tornadoweb/tornado/security/advisories/GHSA-8423-8fgw-73vq"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8952-1"
    }
  ],
  "related": [
    "USN-8952-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-91990"
  ]
}

UBUNTU-CVE-2026-91992 (CVE-2026-91992)

Vulnerability from osv_ubuntu – Published: 2026-09-15 16:17 – Updated: 2026-10-22 20:39 – Source website

Details

Tornado before 6.5.7 contains a credential leak vulnerability in CurlAsyncHTTPClient where pycurl handles are reused across requests without proper state clearing. Attackers can obtain sensitive credentials by issuing requests through the same client instance, allowing TLS certificates or proxy authentication to persist across unintended requests.

Severity

5.9 (Medium)


                    
                      CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

8.2 (High)


                    
                      CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-91992	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-91992	REPORT
	https://github.com/tornadoweb/tornado/security/ad…	REPORT
	https://ubuntu.com/security/notices/USN-8952-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.2.1-1ubuntu3.1+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.2.1-1ubuntu3.1+esm4?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.1-1ubuntu3.1+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.1-1ubuntu2",
        "4.2.1-1ubuntu3",
        "4.2.1-1ubuntu3.1",
        "4.2.1-1ubuntu3.1+esm1",
        "4.2.1-1ubuntu3.1+esm2",
        "4.2.1-1ubuntu3.1+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          },
          {
            "binary_name": "python3-tornado",
            "binary_version": "4.5.3-1ubuntu0.2+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@4.5.3-1ubuntu0.2+esm4?arch=source\u0026distro=esm-apps/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-1ubuntu0.2+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.5.1-2.1~build2",
        "4.5.2-1",
        "4.5.3-1",
        "4.5.3-1ubuntu0.1",
        "4.5.3-1ubuntu0.2",
        "4.5.3-1ubuntu0.2+esm1",
        "4.5.3-1ubuntu0.2+esm2",
        "4.5.3-1ubuntu0.2+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.1.0-3ubuntu0.1~esm6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:22.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.1.0-3ubuntu0.1~esm6?arch=source\u0026distro=esm-apps/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.0-3ubuntu0.1~esm6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.1.0-1build1",
        "6.1.0-2",
        "6.1.0-3",
        "6.1.0-3build1",
        "6.1.0-3ubuntu0.1~esm1",
        "6.1.0-3ubuntu0.1~esm2",
        "6.1.0-3ubuntu0.1~esm4",
        "6.1.0-3ubuntu0.1~esm5"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.4.0-1ubuntu0.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.4.0-1ubuntu0.6?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.0-1ubuntu0.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.3.2-1",
        "6.4.0-0ubuntu1",
        "6.4.0-1",
        "6.4.0-1build1",
        "6.4.0-1ubuntu0.1",
        "6.4.0-1ubuntu0.2",
        "6.4.0-1ubuntu0.4",
        "6.4.0-1ubuntu0.5"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-tornado",
            "binary_version": "6.5.4-0.1ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "python-tornado",
        "purl": "pkg:deb/ubuntu/python-tornado@6.5.4-0.1ubuntu0.2?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.5.4-0.1ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.4.2-3",
        "6.5.2-3",
        "6.5.4-0.1",
        "6.5.4-0.1ubuntu0.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Tornado before 6.5.7 contains a credential leak vulnerability in CurlAsyncHTTPClient where pycurl handles are reused across requests without proper state clearing. Attackers can obtain sensitive credentials by issuing requests through the same client instance, allowing TLS certificates or proxy authentication to persist across unintended requests.",
  "id": "UBUNTU-CVE-2026-91992",
  "modified": "2026-10-22T20:39:57Z",
  "published": "2026-09-15T16:17:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-91992"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91992"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/tornadoweb/tornado/security/advisories/GHSA-pw6j-qg29-8w7f"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8952-1"
    }
  ],
  "related": [
    "USN-8952-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-91992"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

USN-8952-1 (UBUNTU-CVE-2023-54397)

UBUNTU-CVE-2023-54397 (CVE-2023-54397)

UBUNTU-CVE-2024-14029 (CVE-2024-14029)

UBUNTU-CVE-2026-103262 (CVE-2026-103262)

UBUNTU-CVE-2026-103263 (CVE-2026-103263)

UBUNTU-CVE-2026-91990 (CVE-2026-91990)

UBUNTU-CVE-2026-91992 (CVE-2026-91992)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour