OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-ibm-powervsUpgrade fence-agents-cisco-ucsUpgrade fence-agents-ibm-vpcUpgrade fence-agents-apcUpgrade fence-agents-cisco-mdsUpgrade fence-agents-heuristics-pingUpgrade fence-agents-mpathUpgrade fence-agents-kubevirtUpgrade fence-agents-ibmbladeUpgrade fence-agents-drac5Upgrade fence-agents-ilo2Upgrade fence-virtd-tcpUpgrade fence-agents-bladecenterUpgrade fence-agents-azure-armUpgrade fence-agents-rsaUpgrade fence-agents-redfishUpgrade fence-virtd-serialUpgrade fence-agents-lparUpgrade fence-agents-wtiUpgrade fence-agents-zvmUpgrade fence-agents-openstackUpgrade fence-agents-vmware-soapUpgrade fence-agents-sbdUpgrade fence-agents-gceUpgrade fence-agents-vmware-restUpgrade fence-agents-rsbUpgrade fence-agents-ilo-mpUpgrade fence-agents-scsiUpgrade fence-agents-brocadeUpgrade fence-virtdUpgrade fence-agents-amt-wsUpgrade fence-agents-ilo-sshUpgrade fence-agents-kdumpUpgrade fence-agents-ipduUpgrade fence-agents-computeUpgrade fence-virtd-libvirtUpgrade fence-virtd-multicastUpgrade fence-virtUpgrade fence-agents-emersonUpgrade fence-agents-intelmodularUpgrade fence-agents-hpbladeUpgrade fence-agents-awsUpgrade fence-agents-rhevmUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-aliyunUpgrade fence-agents-epsUpgrade fence-agents-allUpgrade fence-agents-commonUpgrade fence-agents-virshUpgrade fence-agents-ifmibUpgrade fence-agents-eaton-snmpUpgrade fence-virtd-cpgUpgrade ha-cloud-supportUpgrade fence-agents-ipmilanUpgrade fence-agents-apc-snmp | May 15, 2023 | Sep 9, 2022 |
| Centos_linux | — | Upgrade fence-agents-kdump-debuginfoUpgrade fence-agents-kubevirtUpgrade fence-agents-debuginfoUpgrade fence-agents-debugsourceUpgrade fence-agents-commonUpgrade fence-agents-virshUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-ibm-vpcUpgrade fence-agents-ibm-powervs | May 15, 2023 | Sep 9, 2022 |
| Debian | — | Upgrade python-oauthlib | Jul 30, 2024 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-oauthlib | Jan 6, 2023 | Sep 9, 2022 |
| Oracle_linux | — | Upgrade fence-virtUpgrade fence-virtd-tcpUpgrade fence-agents-kubevirtUpgrade fence-agents-virshUpgrade fence-virtd-libvirtUpgrade fence-agents-computeUpgrade fence-agents-ibm-vpcUpgrade fence-virtdUpgrade fence-virtd-serialUpgrade fence-virtd-cpgUpgrade fence-virtd-multicastUpgrade fence-agents-commonUpgrade fence-agents-ibm-powervs | May 17, 2023 | Sep 9, 2022 |
| Redhat_linux | — | Upgrade fence-agents-sbdUpgrade fence-agents-ibmbladeUpgrade fence-agents-rhevmUpgrade fence-virtd-libvirtUpgrade fence-agents-ilo-mpUpgrade fence-agents-openstackUpgrade fence-agents-apc-snmpUpgrade fence-agents-gceUpgrade fence-agents-commonUpgrade fence-agents-debuginfoUpgrade fence-agents-ipmilanUpgrade fence-virt-debuginfoUpgrade fence-agents-ifmibUpgrade fence-agents-emersonUpgrade fence-agents-allUpgrade fence-agents-aliyunUpgrade fence-virtd-debuginfoUpgrade fence-agents-virshUpgrade ha-cloud-support-debuginfoUpgrade fence-agents-kubevirtUpgrade fence-agents-cisco-mdsUpgrade fence-virtUpgrade fence-agents-heuristics-pingUpgrade fence-agents-amt-wsUpgrade fence-agents-bladecenterUpgrade fence-agents-brocadeUpgrade fence-agents-eaton-snmpUpgrade fence-agents-ipduUpgrade fence-agents-kdumpUpgrade fence-agents-ilo-sshUpgrade fence-agents-intelmodularUpgrade fence-agents-azure-armUpgrade fence-agents-vmware-soapUpgrade ha-cloud-supportUpgrade fence-agents-apcUpgrade fence-agents-scsiUpgrade fence-virtd-multicastUpgrade fence-virtd-serialUpgrade fence-agents-drac5Upgrade fence-agents-epsUpgrade fence-virtd-libvirt-debuginfoUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-hpbladeUpgrade fence-virtd-cpg-debuginfoUpgrade fence-agents-mpathUpgrade fence-virtdUpgrade fence-agents-rsaUpgrade fence-agents-ibm-powervsUpgrade fence-virtd-tcpUpgrade fence-agents-lparUpgrade fence-agents-computeUpgrade fence-virtd-cpgUpgrade fence-agents-ibm-vpcUpgrade fence-agents-cisco-ucsUpgrade fence-agents-wtiUpgrade fence-virtd-serial-debuginfoUpgrade fence-agents-zvmUpgrade fence-agents-awsUpgrade fence-virtd-multicast-debuginfoUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-vmware-restUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-debugsourceUpgrade fence-agents-redfishUpgrade fence-virtd-tcp-debuginfoUpgrade fence-agents-rsbUpgrade fence-agents-ilo2 | May 15, 2023 | Sep 9, 2022 |
| Ubuntu | — | Upgrade python3-oauthlib | Sep 23, 2022 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub