Tornado before 6.5.8 Memory Amplification DoS via multipart
Published Sep 15, 2026
8.7
HIGHCVSS 4.0
EPSS 0.42%
Description
Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart data before validating the max_parts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and causing denial of service.
Affected products
-
- Version 0StatusaffectedConstraints<6.5.8
- Version 6.5.8StatusunaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Tornadoweb | Tornado | unaffected |
|
No data.
No data.
Exploit Intelligence
exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
Will not fix
Lightspeed Core
lightspeed-core/lightspeed-stack-rhel9
Affected
Lightspeed Core
lightspeed-core/rag-tool-cpu-rhel9
Affected
Lightspeed Core
lightspeed-core/rag-tool-cuda-12.9-rhel9
Affected
Migration Toolkit for Applications 8
mta/mta-solution-server-rhel9
Affected
OpenShift Lightspeed
openshift-lightspeed/lightspeed-ocp-rag-rhel9
Affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-26/lightspeed-chatbot-rhel9
Affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-27/lightspeed-chatbot-rhel9
Affected
Red Hat Enterprise Linux 10
python-tornado
Affected
Red Hat Enterprise Linux 10
rhel10/keylime-registrar
Affected
Red Hat Enterprise Linux 10
rhel10/keylime-verifier
Affected
Red Hat Enterprise Linux 8
pcs
Not affected
Red Hat Enterprise Linux 9
python-tornado
Affected
Red Hat Enterprise Linux 9
rhel9/keylime-registrar
Affected
Red Hat Enterprise Linux 9
rhel9/keylime-verifier
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-cuda-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-gaudi-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-rocm-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/disk-image-cuda-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-feature-server-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-llama-stack-core-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th-torch-cpu-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th-torch-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th-torch-rocm-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th06-cpu-torch210-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th06-cpu-torch291-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th06-cuda130-torch210-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th06-cuda130-torch291-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th06-rocm64-torch291-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-trustyai-nemo-guardrails-server-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9
Affected
Red Hat OpenShift Container Platform 4
openshift/ose-rhel-coreos-9
Affected
Red Hat OpenShift Container Platform 4
python-flit
Affected
Red Hat OpenShift Container Platform 4
python-pep517
Affected
Red Hat OpenShift Container Platform 4
python-tornado
Affected
Red Hat OpenStack Platform 16.2
rhosp-rhel8/openstack-cinder-backup
Affected
Red Hat OpenStack Platform 16.2
rhosp-rhel8/openstack-cinder-volume
Affected
Red Hat OpenStack Platform 16.2
rhosp-rhel8/openstack-haproxy
Affected
Red Hat OpenStack Platform 16.2
rhosp-rhel8/openstack-manila-share
Affected
Red Hat OpenStack Platform 16.2
rhosp-rhel8/openstack-mariadb
Affected
Red Hat OpenStack Platform 16.2
rhosp-rhel8/openstack-ovn-northd
Affected
Red Hat OpenStack Platform 16.2
rhosp-rhel8/openstack-rabbitmq
Affected
Red Hat OpenStack Platform 16.2
rhosp-rhel8/openstack-redis
Affected
Red Hat OpenStack Platform 17.1
rhosp-rhel9/openstack-cinder-backup
Affected
Red Hat OpenStack Platform 17.1
rhosp-rhel9/openstack-cinder-volume
Affected
Red Hat OpenStack Platform 17.1
rhosp-rhel9/openstack-haproxy
Affected
Red Hat OpenStack Platform 17.1
rhosp-rhel9/openstack-manila-share
Affected
Red Hat OpenStack Platform 17.1
rhosp-rhel9/openstack-mariadb
Affected
Red Hat OpenStack Platform 17.1
rhosp-rhel9/openstack-ovn-northd
Affected
Red Hat OpenStack Platform 17.1
rhosp-rhel9/openstack-rabbitmq
Affected
Red Hat OpenStack Platform 17.1
rhosp-rhel9/openstack-redis
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Exploit Intelligence | exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 | Will not fix | n/a |
| Lightspeed Core | lightspeed-core/lightspeed-stack-rhel9 | Affected | n/a |
| Lightspeed Core | lightspeed-core/rag-tool-cpu-rhel9 | Affected | n/a |
| Lightspeed Core | lightspeed-core/rag-tool-cuda-12.9-rhel9 | Affected | n/a |
| Migration Toolkit for Applications 8 | mta/mta-solution-server-rhel9 | Affected | n/a |
| OpenShift Lightspeed | openshift-lightspeed/lightspeed-ocp-rag-rhel9 | Affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-26/lightspeed-chatbot-rhel9 | Affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-27/lightspeed-chatbot-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux 10 | python-tornado | Affected | n/a |
| Red Hat Enterprise Linux 10 | rhel10/keylime-registrar | Affected | n/a |
| Red Hat Enterprise Linux 10 | rhel10/keylime-verifier | Affected | n/a |
| Red Hat Enterprise Linux 8 | pcs | Not affected | n/a |
| Red Hat Enterprise Linux 9 | python-tornado | Affected | n/a |
| Red Hat Enterprise Linux 9 | rhel9/keylime-registrar | Affected | n/a |
| Red Hat Enterprise Linux 9 | rhel9/keylime-verifier | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-cuda-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-gaudi-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-rocm-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/disk-image-cuda-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-feature-server-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-llama-stack-core-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th-torch-cpu-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th-torch-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th-torch-rocm-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th06-cpu-torch210-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th06-cpu-torch291-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th06-cuda130-torch210-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th06-cuda130-torch291-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th06-rocm64-torch291-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-trustyai-nemo-guardrails-server-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift/ose-rhel-coreos-9 | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | python-flit | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | python-pep517 | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | python-tornado | Affected | n/a |
| Red Hat OpenStack Platform 16.2 | rhosp-rhel8/openstack-cinder-backup | Affected | n/a |
| Red Hat OpenStack Platform 16.2 | rhosp-rhel8/openstack-cinder-volume | Affected | n/a |
| Red Hat OpenStack Platform 16.2 | rhosp-rhel8/openstack-haproxy | Affected | n/a |
| Red Hat OpenStack Platform 16.2 | rhosp-rhel8/openstack-manila-share | Affected | n/a |
| Red Hat OpenStack Platform 16.2 | rhosp-rhel8/openstack-mariadb | Affected | n/a |
| Red Hat OpenStack Platform 16.2 | rhosp-rhel8/openstack-ovn-northd | Affected | n/a |
| Red Hat OpenStack Platform 16.2 | rhosp-rhel8/openstack-rabbitmq | Affected | n/a |
| Red Hat OpenStack Platform 16.2 | rhosp-rhel8/openstack-redis | Affected | n/a |
| Red Hat OpenStack Platform 17.1 | rhosp-rhel9/openstack-cinder-backup | Affected | n/a |
| Red Hat OpenStack Platform 17.1 | rhosp-rhel9/openstack-cinder-volume | Affected | n/a |
| Red Hat OpenStack Platform 17.1 | rhosp-rhel9/openstack-haproxy | Affected | n/a |
| Red Hat OpenStack Platform 17.1 | rhosp-rhel9/openstack-manila-share | Affected | n/a |
| Red Hat OpenStack Platform 17.1 | rhosp-rhel9/openstack-mariadb | Affected | n/a |
| Red Hat OpenStack Platform 17.1 | rhosp-rhel9/openstack-ovn-northd | Affected | n/a |
| Red Hat OpenStack Platform 17.1 | rhosp-rhel9/openstack-rabbitmq | Affected | n/a |
| Red Hat OpenStack Platform 17.1 | rhosp-rhel9/openstack-redis | Affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (7)
- https://access.redhat.com/security/cve/CVE-2026-91990 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2533953 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-78661 Advisory
- https://github.com/tornadoweb/tornado/security/advisories/GHSA-8423-8fgw-73vq exploitvendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-91990
- https://www.cve.org/CVERecord?id=CVE-2026-91990
- https://www.vulncheck.com/advisories/tornado-before-6.5.8-memory-amplification-dos-via-multipart third-party-advisory
Change history (0)
No recorded changes yet.