USN-7547-1: Tornado vulnerability
Published Jun 2, 2025
·Updated
It was discovered that Tornado inefficiently handled requests when parsing certain form data. An attacker could possibly use this issue to increase resource utilization leading to a denial of service. This issue was only addressed in Ubuntu 24.04 LTS and Ubuntu 22.04 LTS. (CVE-2025-47287)
Affected Software
8 affected componentsFixes available
All of the following
ubuntu/python3-tornado<6.4.2-1ubuntu0.25.04.1
6.4.2-1ubuntu0.25.04.1
Ubuntu Ubuntu=25.04
All of the following
ubuntu/python3-tornado<6.4.1-2ubuntu0.2
6.4.1-2ubuntu0.2
Ubuntu Ubuntu=24.10
All of the following
ubuntu/python3-tornado<6.4.0-1ubuntu0.2
6.4.0-1ubuntu0.2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/python3-tornado<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=22.04
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/python3-tornadoto a version that resolves this vulnerability.Fixed in 6.4.2-1ubuntu0.25.04.1 - Upgrade
Upgrade
ubuntu/python3-tornadoto a version that resolves this vulnerability.Fixed in 6.4.1-2ubuntu0.2 - Upgrade
Upgrade
ubuntu/python3-tornadoto a version that resolves this vulnerability.Fixed in 6.4.0-1ubuntu0.2 - Upgrade
Upgrade
ubuntu/python3-tornadoto a version that resolves this vulnerability.Fixed in Ubuntu Pro
Event History
Jun 2, 2025
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software