OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-azure-armUpgrade fence-agents-bladecenterUpgrade fence-agents-mpathUpgrade fence-agents-drac5Upgrade fence-agents-ibmbladeUpgrade fence-virtd-tcpUpgrade fence-agents-heuristics-pingUpgrade fence-agents-apcUpgrade fence-agents-redfishUpgrade fence-agents-ilo2Upgrade fence-agents-cisco-mdsUpgrade fence-agents-lparUpgrade fence-agents-cisco-ucsUpgrade fence-agents-wtiUpgrade fence-agents-ibm-powervsUpgrade fence-agents-rsaUpgrade fence-agents-ibm-vpcUpgrade fence-virtd-serialUpgrade fence-agents-kubevirtUpgrade fence-agents-ipduUpgrade fence-agents-ilo-mpUpgrade fence-agents-kdumpUpgrade fence-agents-rhevmUpgrade fence-agents-zvmUpgrade fence-agents-intelmodularUpgrade fence-agents-brocadeUpgrade fence-virtd-multicastUpgrade fence-agents-scsiUpgrade fence-agents-ifmibUpgrade fence-agents-virshUpgrade fence-agents-aliyunUpgrade fence-agents-allUpgrade fence-agents-commonUpgrade fence-virtUpgrade fence-agents-apc-snmpUpgrade fence-agents-amt-wsUpgrade fence-agents-eaton-snmpUpgrade fence-agents-vmware-soapUpgrade fence-agents-epsUpgrade fence-agents-sbdUpgrade fence-agents-emersonUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-computeUpgrade fence-agents-vmware-restUpgrade fence-agents-gceUpgrade fence-agents-awsUpgrade fence-agents-hpbladeUpgrade ha-cloud-supportUpgrade fence-agents-ilo-sshUpgrade fence-agents-ipmilanUpgrade fence-virtd-libvirtUpgrade fence-virtd-cpgUpgrade fence-agents-openstackUpgrade fence-virtdUpgrade fence-agents-rsb | May 15, 2023 | Sep 9, 2022 |
| Centos_linux | — | Upgrade fence-agents-kdump-debuginfoUpgrade fence-agents-kubevirtUpgrade fence-agents-debuginfoUpgrade fence-agents-commonUpgrade fence-agents-ibm-vpcUpgrade fence-agents-virshUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-debugsourceUpgrade fence-agents-ibm-powervs | May 15, 2023 | Sep 9, 2022 |
| Debian | — | Upgrade python-oauthlib | Jul 30, 2024 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-oauthlib | Jan 6, 2023 | Sep 9, 2022 |
| Oracle_linux | — | Upgrade fence-agents-ibm-vpcUpgrade fence-agents-ibm-powervsUpgrade fence-agents-commonUpgrade fence-virtd-cpgUpgrade fence-virtd-serialUpgrade fence-virtd-multicastUpgrade fence-agents-computeUpgrade fence-virtdUpgrade fence-agents-virshUpgrade fence-agents-kubevirtUpgrade fence-virtd-libvirtUpgrade fence-virtd-tcpUpgrade fence-virt | May 17, 2023 | Sep 9, 2022 |
| Redhat_linux | — | Upgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-debugsourceUpgrade fence-agents-epsUpgrade fence-agents-computeUpgrade fence-agents-ibm-vpcUpgrade fence-agents-lparUpgrade fence-agents-hpbladeUpgrade fence-virtd-cpgUpgrade fence-agents-awsUpgrade fence-virtd-serialUpgrade fence-agents-mpathUpgrade fence-virtdUpgrade fence-agents-zvmUpgrade fence-virtd-libvirt-debuginfoUpgrade fence-agents-ilo2Upgrade fence-agents-cisco-ucsUpgrade fence-agents-vmware-restUpgrade fence-virtd-cpg-debuginfoUpgrade fence-agents-redfishUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-ibm-powervsUpgrade fence-agents-wtiUpgrade fence-agents-drac5Upgrade fence-agents-ilo-moonshotUpgrade fence-virtd-tcpUpgrade fence-virtd-multicast-debuginfoUpgrade fence-virtd-serial-debuginfoUpgrade fence-virtd-tcp-debuginfoUpgrade fence-agents-rsaUpgrade fence-agents-rsbUpgrade fence-virtUpgrade fence-agents-intelmodularUpgrade fence-agents-heuristics-pingUpgrade fence-agents-aliyunUpgrade fence-agents-ilo-mpUpgrade fence-agents-ipmilanUpgrade fence-agents-kubevirtUpgrade fence-agents-commonUpgrade fence-agents-ibmbladeUpgrade fence-agents-openstackUpgrade fence-virt-debuginfoUpgrade fence-agents-debuginfoUpgrade fence-agents-sbdUpgrade fence-agents-scsiUpgrade fence-virtd-multicastUpgrade fence-virtd-libvirtUpgrade fence-agents-virshUpgrade fence-agents-apc-snmpUpgrade fence-agents-ilo-sshUpgrade fence-agents-allUpgrade fence-virtd-debuginfoUpgrade fence-agents-rhevmUpgrade ha-cloud-support-debuginfoUpgrade fence-agents-emersonUpgrade fence-agents-kdumpUpgrade fence-agents-ipduUpgrade fence-agents-azure-armUpgrade fence-agents-apcUpgrade ha-cloud-supportUpgrade fence-agents-vmware-soapUpgrade fence-agents-brocadeUpgrade fence-agents-bladecenterUpgrade fence-agents-eaton-snmpUpgrade fence-agents-cisco-mdsUpgrade fence-agents-gceUpgrade fence-agents-amt-wsUpgrade fence-agents-ifmib | May 15, 2023 | Sep 9, 2022 |
| Ubuntu | — | Upgrade python3-oauthlib | Sep 23, 2022 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub