OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-ibmbladeUpgrade fence-agents-azure-armUpgrade fence-agents-ibm-vpcUpgrade fence-virtd-serialUpgrade fence-agents-cisco-mdsUpgrade fence-agents-cisco-ucsUpgrade fence-agents-kubevirtUpgrade fence-agents-wtiUpgrade fence-agents-drac5Upgrade fence-agents-bladecenterUpgrade fence-agents-lparUpgrade fence-agents-ilo2Upgrade fence-agents-mpathUpgrade fence-agents-ibm-powervsUpgrade fence-agents-apcUpgrade fence-virtd-tcpUpgrade fence-agents-heuristics-pingUpgrade fence-agents-redfishUpgrade fence-agents-rsaUpgrade fence-virtd-cpgUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-apc-snmpUpgrade fence-virtUpgrade fence-agents-ipmilanUpgrade fence-agents-vmware-restUpgrade fence-agents-aliyunUpgrade fence-virtd-multicastUpgrade fence-agents-ipduUpgrade fence-agents-epsUpgrade fence-agents-zvmUpgrade fence-agents-allUpgrade fence-agents-virshUpgrade fence-agents-kdumpUpgrade fence-agents-amt-wsUpgrade fence-agents-sbdUpgrade fence-agents-ifmibUpgrade fence-agents-awsUpgrade fence-agents-ilo-sshUpgrade fence-agents-emersonUpgrade fence-agents-ilo-mpUpgrade fence-virtd-libvirtUpgrade fence-agents-openstackUpgrade fence-agents-rhevmUpgrade fence-virtdUpgrade fence-agents-commonUpgrade fence-agents-vmware-soapUpgrade fence-agents-eaton-snmpUpgrade fence-agents-gceUpgrade fence-agents-hpbladeUpgrade fence-agents-computeUpgrade fence-agents-scsiUpgrade ha-cloud-supportUpgrade fence-agents-intelmodularUpgrade fence-agents-rsbUpgrade fence-agents-brocade | May 15, 2023 | Sep 9, 2022 |
| Centos_linux | — | Upgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-ibm-powervsUpgrade fence-agents-virshUpgrade fence-agents-ibm-vpcUpgrade fence-agents-commonUpgrade fence-agents-debugsourceUpgrade fence-agents-debuginfoUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-kubevirt | May 15, 2023 | Sep 9, 2022 |
| Debian | — | Upgrade python-oauthlib | Jul 30, 2024 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-oauthlib | Jan 6, 2023 | Sep 9, 2022 |
| Oracle_linux | — | Upgrade fence-virtd-tcpUpgrade fence-virtd-libvirtUpgrade fence-agents-kubevirtUpgrade fence-agents-virshUpgrade fence-virtUpgrade fence-agents-ibm-vpcUpgrade fence-agents-ibm-powervsUpgrade fence-virtd-multicastUpgrade fence-virtdUpgrade fence-agents-commonUpgrade fence-virtd-serialUpgrade fence-virtd-cpgUpgrade fence-agents-compute | May 17, 2023 | Sep 9, 2022 |
| Redhat_linux | — | Upgrade fence-virt-debuginfoUpgrade fence-virtUpgrade fence-agents-sbdUpgrade fence-agents-brocadeUpgrade ha-cloud-support-debuginfoUpgrade fence-agents-kubevirtUpgrade fence-agents-emersonUpgrade fence-virtd-multicastUpgrade fence-agents-ifmibUpgrade fence-agents-allUpgrade fence-agents-azure-armUpgrade fence-agents-ipduUpgrade fence-agents-kdumpUpgrade fence-agents-apcUpgrade ha-cloud-supportUpgrade fence-agents-vmware-soapUpgrade fence-agents-gceUpgrade fence-agents-intelmodularUpgrade fence-agents-cisco-mdsUpgrade fence-agents-amt-wsUpgrade fence-agents-bladecenterUpgrade fence-agents-eaton-snmpUpgrade fence-agents-debuginfoUpgrade fence-agents-commonUpgrade fence-agents-rhevmUpgrade fence-agents-virshUpgrade fence-agents-openstackUpgrade fence-virtd-libvirtUpgrade fence-agents-ibmbladeUpgrade fence-virtd-debuginfoUpgrade fence-agents-apc-snmpUpgrade fence-agents-ilo-sshUpgrade fence-agents-aliyunUpgrade fence-agents-ilo-mpUpgrade fence-agents-heuristics-pingUpgrade fence-agents-ipmilanUpgrade fence-agents-scsiUpgrade fence-virtd-tcpUpgrade fence-agents-vmware-restUpgrade fence-agents-rsaUpgrade fence-agents-awsUpgrade fence-agents-computeUpgrade fence-agents-ibm-powervsUpgrade fence-virtd-multicast-debuginfoUpgrade fence-agents-ilo-moonshotUpgrade fence-virtd-serial-debuginfoUpgrade fence-agents-mpathUpgrade fence-agents-lparUpgrade fence-agents-zvmUpgrade fence-agents-ibm-vpcUpgrade fence-virtd-cpgUpgrade fence-agents-hpbladeUpgrade fence-agents-rsbUpgrade fence-virtd-cpg-debuginfoUpgrade fence-virtd-tcp-debuginfoUpgrade fence-agents-redfishUpgrade fence-agents-wtiUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-debugsourceUpgrade fence-agents-cisco-ucsUpgrade fence-virtd-serialUpgrade fence-agents-ilo2Upgrade fence-agents-epsUpgrade fence-agents-drac5Upgrade fence-virtd-libvirt-debuginfoUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-virtd | May 15, 2023 | Sep 9, 2022 |
| Ubuntu | — | Upgrade python3-oauthlib | Sep 23, 2022 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub