Is CVE-2023-46137 in the CISA KEV catalog?

No. CVE-2023-46137 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-46137?

CVE-2023-46137 has a CVSS v3 base score of 5.3 (MEDIUM).

What is the EPSS score for CVE-2023-46137?

CVE-2023-46137 has an EPSS score of 0.77% (51th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-46137?

Upgrade twisted on debian 11 to 20.3.0-7+deb11u2 or later. Fixes are available for 91 affected products.

CVE & CISA-KEV Catalog

CVE-2023-46137

MEDIUM

5.3

CVSS v3

NVD

Description

Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. Version 23.10.0rc1 contains a patch for this issue.

CWE-444

How to fix

Remediation Available

twistedDebian

Fixed in:20.3.0-7+deb11u2CVE-2023-46137

Fixed in:22.4.0-4+deb12u1CVE-2023-46137

Fixed in:23.10.0-1CVE-2023-46137

ansible-coreRocky

Fixed in:1:2.15.10-1.el8apRHSA-2024:1640

Fixed in:1:2.15.10-1.el9apRHSA-2024:1640

ansible-coreRed Hat / RHEL

Fixed in:1:2.15.10-1.el8apRHSA-2024:1640

Fixed in:1:2.15.10-1.el9apRHSA-2024:1640

ansible-runnerRocky

Fixed in:0:2.3.6-1.el8apRHSA-2024:1640

Fixed in:0:2.3.6-1.el9apRHSA-2024:1640

ansible-runnerRed Hat / RHEL

Fixed in:0:2.3.6-1.el8apRHSA-2024:1640

Fixed in:0:2.3.6-1.el9apRHSA-2024:1640

ansible-testRed Hat / RHEL

Fixed in:1:2.15.10-1.el8apRHSA-2024:1640

Fixed in:1:2.15.10-1.el9apRHSA-2024:1640

ansible-testRocky

Fixed in:1:2.15.10-1.el8apRHSA-2024:1640

Fixed in:1:2.15.10-1.el9apRHSA-2024:1640

automation-controllerRocky

Fixed in:0:4.5.5-2.el8apRHSA-2024:1640

Fixed in:0:4.5.5-2.el9apRHSA-2024:1640

automation-controllerRed Hat / RHEL

Fixed in:0:4.5.5-2.el8apRHSA-2024:1640

Fixed in:0:4.5.5-2.el9apRHSA-2024:1640

automation-controller-cliRed Hat / RHEL

Fixed in:0:4.5.5-2.el8apRHSA-2024:1640

Fixed in:0:4.5.5-2.el9apRHSA-2024:1640

automation-controller-cliRocky

Fixed in:0:4.5.5-2.el8apRHSA-2024:1640

Fixed in:0:4.5.5-2.el9apRHSA-2024:1640

automation-controller-serverRed Hat / RHEL

Fixed in:0:4.5.5-2.el8apRHSA-2024:1640

Fixed in:0:4.5.5-2.el9apRHSA-2024:1640

automation-controller-serverRocky

Fixed in:0:4.5.5-2.el8apRHSA-2024:1640

Fixed in:0:4.5.5-2.el9apRHSA-2024:1640

automation-controller-uiRed Hat / RHEL

Fixed in:0:4.5.5-2.el8apRHSA-2024:1640

Fixed in:0:4.5.5-2.el9apRHSA-2024:1640

automation-controller-uiRocky

Fixed in:0:4.5.5-2.el8apRHSA-2024:1640

Fixed in:0:4.5.5-2.el9apRHSA-2024:1640

automation-controller-venv-towerRocky

Fixed in:0:4.5.5-2.el8apRHSA-2024:1640

Fixed in:0:4.5.5-2.el9apRHSA-2024:1640

automation-controller-venv-towerRed Hat / RHEL

Fixed in:0:4.5.5-2.el8apRHSA-2024:1640

Fixed in:0:4.5.5-2.el9apRHSA-2024:1640

python-aiohttpRocky

Fixed in:0:3.9.3-1.el9apRHSA-2024:1640

python-aiohttpRed Hat / RHEL

Fixed in:0:3.9.3-1.el9apRHSA-2024:1640

python-aiohttp-debugsourceRocky

Fixed in:0:3.9.3-1.el9apRHSA-2024:1640

python-aiohttp-debugsourceRed Hat / RHEL

Fixed in:0:3.9.3-1.el9apRHSA-2024:1640

python-djangoRed Hat / RHEL

Fixed in:0:4.2.11-1.el9apRHSA-2024:1640

python-djangoRocky

Fixed in:0:4.2.11-1.el9apRHSA-2024:1640

python-dynaconfRocky

Fixed in:0:3.1.12-2.el9apRHSA-2024:0322

python-dynaconfRed Hat / RHEL

Fixed in:0:3.1.12-2.el9apRHSA-2024:0322

python-gitpythonRed Hat / RHEL

Fixed in:0:3.1.40-1.el9apRHSA-2024:0322

python-gitpythonRocky

Fixed in:0:3.1.40-1.el9apRHSA-2024:0322

python-pulpcoreRed Hat / RHEL

Fixed in:0:3.28.24-1.el9apRHSA-2024:1640

python-pulpcoreRocky

Fixed in:0:3.28.24-1.el9apRHSA-2024:1640

python-twistedRocky

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1516

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1518

Fixed in:0:23.10.0-1.el9apRHSA-2024:0322

python-twistedRed Hat / RHEL

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1516

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1518

Fixed in:0:23.10.0-1.el9apRHSA-2024:0322

python-twisted-debugsourceRocky

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1516

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1518

python-twisted-debugsourceRed Hat / RHEL

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1518

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1516

python3-aiohttpRed Hat / RHEL

Fixed in:0:3.9.3-1.el9apRHSA-2024:1640

python3-aiohttpRocky

Fixed in:0:3.9.3-1.el9apRHSA-2024:1640

python3-aiohttp-debuginfoRocky

Fixed in:0:3.9.3-1.el9apRHSA-2024:1640

python3-aiohttp-debuginfoRed Hat / RHEL

Fixed in:0:3.9.3-1.el9apRHSA-2024:1640

python3-ansible-runnerRed Hat / RHEL

Fixed in:0:2.3.6-1.el9apRHSA-2024:1640

python3-ansible-runnerRocky

Fixed in:0:2.3.6-1.el9apRHSA-2024:1640

python3-djangoRocky

Fixed in:0:4.2.11-1.el9apRHSA-2024:1640

python3-djangoRed Hat / RHEL

Fixed in:0:4.2.11-1.el9apRHSA-2024:1640

python3-dynaconfRocky

Fixed in:0:3.1.12-2.el9apRHSA-2024:0322

python3-dynaconfRed Hat / RHEL

Fixed in:0:3.1.12-2.el9apRHSA-2024:0322

python3-gitpythonRed Hat / RHEL

Fixed in:0:3.1.40-1.el9apRHSA-2024:0322

python3-gitpythonRocky

Fixed in:0:3.1.40-1.el9apRHSA-2024:0322

python3-pulpcoreRed Hat / RHEL

Fixed in:0:3.28.24-1.el9apRHSA-2024:1640

python3-pulpcoreRocky

Fixed in:0:3.28.24-1.el9apRHSA-2024:1640

python3-twistedRed Hat / RHEL

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1518

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1516

Fixed in:0:23.10.0-1.el9apRHSA-2024:0322

python3-twistedRocky

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1516

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1518

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1516

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1518

Fixed in:0:23.10.0-1.el9apRHSA-2024:0322

python3-twisted+tlsRed Hat / RHEL

Fixed in:0:23.10.0-1.el9apRHSA-2024:0322

python3-twisted+tlsRocky

Fixed in:0:23.10.0-1.el9apRHSA-2024:0322

python3-twisted-debuginfoRocky

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1518

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1516

python3-twisted-debuginfoRed Hat / RHEL

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1518

Fixed in:0:16.4.1-21.el8ostRHSA-2024:1516

python39-aiohttpRed Hat / RHEL

Fixed in:0:3.9.3-1.el8apRHSA-2024:1640

python39-aiohttpRocky

Fixed in:0:3.9.3-1.el8apRHSA-2024:1640

python39-aiohttp-debuginfoRocky

Fixed in:0:3.9.3-1.el8apRHSA-2024:1640

python39-aiohttp-debuginfoRed Hat / RHEL

Fixed in:0:3.9.3-1.el8apRHSA-2024:1640

python39-ansible-runnerRed Hat / RHEL

Fixed in:0:2.3.6-1.el8apRHSA-2024:1640

python39-ansible-runnerRocky

Fixed in:0:2.3.6-1.el8apRHSA-2024:1640

python39-djangoRed Hat / RHEL

Fixed in:0:4.2.11-1.el8apRHSA-2024:1640

python39-djangoRocky

Fixed in:0:4.2.11-1.el8apRHSA-2024:1640

python39-dynaconfRocky

Fixed in:0:3.1.12-2.el8apRHSA-2024:0322

python39-dynaconfRed Hat / RHEL

Fixed in:0:3.1.12-2.el8apRHSA-2024:0322

python39-gitpythonRocky

Fixed in:0:3.1.40-1.el8apRHSA-2024:0322

python39-gitpythonRed Hat / RHEL

Fixed in:0:3.1.40-1.el8apRHSA-2024:0322

python39-pulpcoreRed Hat / RHEL

Fixed in:0:3.28.24-1.el8apRHSA-2024:1640

python39-pulpcoreRocky

Fixed in:0:3.28.24-1.el8apRHSA-2024:1640

python39-twistedRocky

Fixed in:0:23.10.0-1.el8apRHSA-2024:0322

python39-twistedRed Hat / RHEL

Fixed in:0:23.10.0-1.el8apRHSA-2024:0322

python39-twisted+tlsRed Hat / RHEL

Fixed in:0:23.10.0-1.el8apRHSA-2024:0322

python39-twisted+tlsRocky

Fixed in:0:23.10.0-1.el8apRHSA-2024:0322

python3x-aiohttpRed Hat / RHEL

Fixed in:0:3.9.3-1.el8apRHSA-2024:1640

python3x-aiohttpRocky

Fixed in:0:3.9.3-1.el8apRHSA-2024:1640

python3x-aiohttp-debugsourceRocky

Fixed in:0:3.9.3-1.el8apRHSA-2024:1640

python3x-aiohttp-debugsourceRed Hat / RHEL

Fixed in:0:3.9.3-1.el8apRHSA-2024:1640

python3x-djangoRed Hat / RHEL

Fixed in:0:4.2.11-1.el8apRHSA-2024:1640

python3x-djangoRocky

Fixed in:0:4.2.11-1.el8apRHSA-2024:1640

python3x-dynaconfRocky

Fixed in:0:3.1.12-2.el8apRHSA-2024:0322

python3x-dynaconfRed Hat / RHEL

Fixed in:0:3.1.12-2.el8apRHSA-2024:0322

python3x-gitpythonRocky

Fixed in:0:3.1.40-1.el8apRHSA-2024:0322

python3x-gitpythonRed Hat / RHEL

Fixed in:0:3.1.40-1.el8apRHSA-2024:0322

python3x-pulpcoreRed Hat / RHEL

Fixed in:0:3.28.24-1.el8apRHSA-2024:1640

python3x-pulpcoreRocky

Fixed in:0:3.28.24-1.el8apRHSA-2024:1640

python3x-twistedRocky

Fixed in:0:23.10.0-1.el8apRHSA-2024:0322

python3x-twistedRed Hat / RHEL

Fixed in:0:23.10.0-1.el8apRHSA-2024:0322

receptorRocky

Fixed in:0:1.4.5-1.el8apRHSA-2024:1640

Fixed in:0:1.4.5-1.el9apRHSA-2024:1640

receptorRed Hat / RHEL

Fixed in:0:1.4.5-1.el8apRHSA-2024:1640

Fixed in:0:1.4.5-1.el9apRHSA-2024:1640

receptorctlRed Hat / RHEL

Fixed in:0:1.4.5-1.el8apRHSA-2024:1640

Fixed in:0:1.4.5-1.el9apRHSA-2024:1640

receptorctlRocky

Fixed in:0:1.4.5-1.el8apRHSA-2024:1640

Fixed in:0:1.4.5-1.el9apRHSA-2024:1640

python3-twistedUbuntu

Fixed in:18.9.0-11ubuntu0.20.04.3USN-6575-1

Fixed in:22.1.0-2ubuntu2.4USN-6575-1

Fixed in:22.4.0-4ubuntu0.23.04.1USN-6575-1

Fixed in:22.4.0-4ubuntu0.23.10.1USN-6575-1

twistedUbuntu

Fixed in:18.9.0-11ubuntu0.20.04.3USN-6575-1

Fixed in:22.1.0-2ubuntu2.4USN-6575-1

Fixed in:22.4.0-4ubuntu0.23.04.1USN-6575-1

Fixed in:22.4.0-4ubuntu0.23.10.1USN-6575-1

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityLow

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploit Intelligence

0.77%probability of exploitation in 30 days

51stpercentile

Moderate risk: more likely to be exploited than 51% of all known CVEs.

References

Exploit1

github.com

Other references1

lists.debian.org

Related Vulnerabilities

Other CWE-444 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2022-22536	Critical	10.0	98%	KEV	-
CVE-2025-61884	High	7.5	98%	KEV + Ransom	-
CVE-2020-9490	High	7.5	90%	-	Fix
CVE-2023-41265	Critical	9.6	85%	KEV + Ransom	-
CVE-2023-25690	Critical	9.8	84%	-	Fix
CVE-2022-32214	Medium	6.5	78%	-	Fix

Embed a live status badge for CVE-2023-46137

Markdown

[![CVE-2023-46137](https://tridentstack.com/cve/badge/CVE-2023-46137.svg)](https://tridentstack.com/cve/CVE-2023-46137)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-46137"><img src="https://tridentstack.com/cve/badge/CVE-2023-46137.svg" alt="CVE-2023-46137"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-11-03.