Red Hat Security Advisory: python-tornado security update
A denial-of-service (DoS) vulnerability exists in the python-tornado package used by the pcs command-line configuration system for Pacemaker and Corosync utilities. The issue involves HTTP cookie parsing in Tornado, which could be exploited to cause service disruption. Red Hat has issued security advisories for Red Hat Enterprise Linux 8.8 and 9.2 Extended Update Support releases, providing updated packages to address this vulnerability.
AI Analysis
Technical Summary
CVE-2024-52804 is a denial of service vulnerability in the python-tornado package's HTTP cookie parsing implementation. Tornado is a Python web framework and asynchronous networking library. The vulnerability allows an attacker to cause a denial of service by exploiting the way HTTP cookies are parsed. Red Hat has issued security advisories and updates for various Red Hat Enterprise Linux 9.x versions, including Extended Update Support and Update Services for SAP Solutions, to fix this issue by updating python-tornado to version 6.4.2-1.el9_5 or later.
Potential Impact
The vulnerability allows an attacker to cause a denial of service condition by sending specially crafted HTTP cookies to applications using the affected python-tornado versions. This could disrupt services relying on Tornado's HTTP server capabilities. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated python-tornado packages that fix this vulnerability. Users should apply the security updates provided for Red Hat Enterprise Linux 9.2, 9.6, 9.8, and related variants as detailed in Red Hat advisories RHSA-2024:10836 and RHSA-2024:10590. Refer to https://access.redhat.com/articles/11258 for update instructions. Applying these official patches fully mitigates the issue.
Red Hat Security Advisory: python-tornado security update
Description
A denial-of-service (DoS) vulnerability exists in the python-tornado package used by the pcs command-line configuration system for Pacemaker and Corosync utilities. The issue involves HTTP cookie parsing in Tornado, which could be exploited to cause service disruption. Red Hat has issued security advisories for Red Hat Enterprise Linux 8.8 and 9.2 Extended Update Support releases, providing updated packages to address this vulnerability.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-52804 is a denial of service vulnerability in the python-tornado package's HTTP cookie parsing implementation. Tornado is a Python web framework and asynchronous networking library. The vulnerability allows an attacker to cause a denial of service by exploiting the way HTTP cookies are parsed. Red Hat has issued security advisories and updates for various Red Hat Enterprise Linux 9.x versions, including Extended Update Support and Update Services for SAP Solutions, to fix this issue by updating python-tornado to version 6.4.2-1.el9_5 or later.
Potential Impact
The vulnerability allows an attacker to cause a denial of service condition by sending specially crafted HTTP cookies to applications using the affected python-tornado versions. This could disrupt services relying on Tornado's HTTP server capabilities. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated python-tornado packages that fix this vulnerability. Users should apply the security updates provided for Red Hat Enterprise Linux 9.2, 9.6, 9.8, and related variants as detailed in Red Hat advisories RHSA-2024:10836 and RHSA-2024:10590. Refer to https://access.redhat.com/articles/11258 for update instructions. Applying these official patches fully mitigates the issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:3108
- Cve Count
- 1
Threat ID: 6a3da1d64853345fc182728d
Added to database: 06/25/2026, 21:47:02 UTC
Last enriched: 08/07/2026, 00:37:44 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 21
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.