## Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer

- 種別: advisory
- 重大度: high
- 関連技術: python
- CVE: CVE-2026-115778
- 公開日時: 2026-10-23T20:45:26.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-cwm5-jh59-mwxr)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-cwm5-jh59-mwxr

影響: pip:Twisted <= 26.4.0 → 26.10.0rc1
An allocation-without-limits vulnerability (CWE-770) in the Twisted conch telnet transport lets any unauthenticated remote peer exhaust server memory over a single connection. When the peer opens a telnet subnegotiation with IAC SB and then streams bytes without ever sending the IAC SE terminator, every byte is appended to a per-connection buffer that has no maximum length. The buffer persists across reads and is released only on the terminator the attacker withholds, so it grows without bound…