Vulnerability Name:

CVE-2022-21716 (CCN-221053)

Assigned:2021-11-16
Published:2022-03-03
Updated:2023-07-24
Summary:
CVSS v3 Severity:7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2022-21716

Source: XF
Type: UNKNOWN
twisted-cve202221716-dos(221053)

Source: security-advisories@github.com
Type: Patch, Third Party Advisory
security-advisories@github.com

Source: security-advisories@github.com
Type: Release Notes, Third Party Advisory
security-advisories@github.com

Source: CCN
Type: twisted GIT Repository
Twisted SSH client and server denial of service during SSH handshake

Source: security-advisories@github.com
Type: Exploit, Patch, Third Party Advisory
security-advisories@github.com

Source: security-advisories@github.com
Type: Mailing List, Third Party Advisory
security-advisories@github.com

Source: security-advisories@github.com
Type: Mailing List, Third Party Advisory
security-advisories@github.com

Source: security-advisories@github.com
Type: Mailing List, Third Party Advisory
security-advisories@github.com

Source: security-advisories@github.com
Type: Third Party Advisory
security-advisories@github.com

Source: security-advisories@github.com
Type: Issue Tracking, Vendor Advisory
security-advisories@github.com

Source: CCN
Type: IBM Security Bulletin 6593867 (Watson Speech Services Cartridge for Cloud Pak for Data)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable a denial of service, caused by a buffer overflow with Twisted (CVE-2022-21716)

Source: CCN
Type: IBM Security Bulletin 6610100 (Watson Speech Services Cartridge for Cloud Pak for Data)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by a buffer overflow in Twisted (CVE-2022-21716)

Source: security-advisories@github.com
Type: Patch, Third Party Advisory
security-advisories@github.com

Oval Definitions
Definition IDClassTitleLast Modified
oval:org.opensuse.security:def:551
P
Security update for python-Twisted (Important)
2022-07-06
oval:org.opensuse.security:def:3762
P
Security update for python-Twisted (Important)
2022-07-06
oval:org.opensuse.security:def:95395
P
Security update for python-Twisted (Important)
2022-07-06
oval:org.opensuse.security:def:119418
P
Security update for python-Twisted (Important)
2022-06-14
oval:org.opensuse.security:def:1525
P
Security update for python-Twisted (Important)
2022-06-14
oval:org.opensuse.security:def:118733
P
Security update for python-Twisted (Important)
2022-06-14
oval:org.opensuse.security:def:119603
P
Security update for python-Twisted (Important)
2022-06-14
oval:org.opensuse.security:def:1677
P
Security update for python-Twisted (Important)
2022-06-14
oval:org.opensuse.security:def:118923
P
Security update for python-Twisted (Important)
2022-06-14
oval:org.opensuse.security:def:119228
P
Security update for python-Twisted (Important)
2022-06-14
BACK