Nixpkgs security tracker
5.3 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): Low (L)
- Integrity (I): None (N)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): Low (L)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): None (N)
Activity log
- Created suggestion
Tornado: Out-of-bounds memory access in C extension
Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tornado.speedups implemented websocket_mask without validating that the mask argument is exactly four bytes, allowing the C function to read up to three bytes beyond the provided buffer when reached through Tornado XSRF token decoding with the native extension active. This issue is fixed in version 6.5.6.
References
-
https://github.com/tornadoweb/tornado/security/advisories/GHSA-cx3h-4qpv-8hc9 x_refsource_CONFIRM
-
https://github.com/tornadoweb/tornado/pull/3626 x_refsource_MISC
-
https://github.com/tornadoweb/tornado/releases/tag/v6.5.6 x_refsource_MISC
Affected products
- ==< 6.5.6
Matching in nixpkgs
pkgs.python313Packages.tornado
Web framework and asynchronous networking library
pkgs.python314Packages.tornado
Web framework and asynchronous networking library
pkgs.python313Packages.pytest-tornado
Py.test plugin providing fixtures and markers to simplify testing of asynchronous tornado applications
pkgs.python313Packages.sockjs-tornado
SockJS python server implementation on top of Tornado framework
pkgs.python314Packages.pytest-tornado
Py.test plugin providing fixtures and markers to simplify testing of asynchronous tornado applications
pkgs.python314Packages.sockjs-tornado
SockJS python server implementation on top of Tornado framework