Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
影響: pip:Twisted <= 26.4.0 → 26.10.0rc1
An infinite-loop vulnerability (CWE-835) in the Twisted IMAP4 server lets an authenticated client freeze the whole process with one small command. twisted.mail.imap4.parseNestedParens reads an IMAP literal size with int() and never rejects a negative value. A negative size such as {-100} drives the parser cursor negative, and because a negative Python index wraps around the end of the string instead of raising, the scanning loop never terminates. It runs synchronously on the single-threaded rea…
Read on GitHub Advisory Database
| CVE | CVE-2026-115774 |
|---|---|
| Source | GitHub Advisory Database |
| Fetched | 10/24/2026, 01:50 PM |
| Data | Markdown JSON |
On 10/24/2026, 05:46 AM, GitHub Advisory Database published "Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH" (type: Advisory). Severity is "Medium" (medium). Related technologies: Python. CVE: CVE-2026-115774.