CVE-2014-7143: High severity Twisted Twisted vulnerability

Published Nov 12, 2019

Updated

Python Twisted 14.0 trustRoot is not respected in HTTP client

Other sources

Python Twisted 14.0.0 trustRoot is not respected in HTTP client

Affected Software

4 affected componentsFixes available

pip/twisted=14.0.0

14.0.1

Twisted Twisted=14.0.0

twistedmatrix Twisted=14.0.0

debian/twisted

20.3.0-7+deb11u120.3.0-7+deb11u222.4.0-4+deb12u124.11.0-125.5.0-5

Event History

Nov 12, 2019

CVE Published

via MITRE·01:04 PM

Data Sourced

via MITRE·01:04 PM

Description

Dec 17, 2019

Advisory Published

via GitHub·10:52 PM

Feb 18, 2026

Data Sourced

via Debian·08:20 PM

DescriptionAffected Software

Frequently Asked Questions

What is CVE-2014-7143?

CVE-2014-7143 is a vulnerability in Python Twisted 14.0 where the `trustRoot` parameter is not respected in the HTTP client.

How severe is CVE-2014-7143?

CVE-2014-7143 has a severity rating of high, with a severity value of 7.5.

Which software versions are affected by CVE-2014-7143?

Python Twisted 14.0.0 is affected by CVE-2014-7143.

How can I fix CVE-2014-7143?

Users should upgrade to Python Twisted version 14.0.1 or higher to fix CVE-2014-7143.

Where can I find more information about CVE-2014-7143?

More information about CVE-2014-7143 can be found at the following references: 1. NIST NVD: [Link](https://nvd.nist.gov/vuln/detail/CVE-2014-7143) 2. Twisted GitHub Commit: [Link](https://github.com/twisted/twisted/commit/3b5942252f5f3e45862a0e12b266ab29e243cc33) 3. Red Hat Bugzilla: [Link](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-7143)