OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-ibm-vpcUpgrade fence-agents-wtiUpgrade fence-agents-mpathUpgrade fence-agents-apcUpgrade fence-agents-cisco-mdsUpgrade fence-agents-lparUpgrade fence-agents-drac5Upgrade fence-agents-ibm-powervsUpgrade fence-agents-cisco-ucsUpgrade fence-agents-ilo2Upgrade fence-agents-redfishUpgrade fence-virtd-serialUpgrade fence-virtd-tcpUpgrade fence-agents-heuristics-pingUpgrade fence-agents-ibmbladeUpgrade fence-agents-kubevirtUpgrade fence-agents-azure-armUpgrade fence-agents-bladecenterUpgrade fence-agents-rsaUpgrade fence-agents-scsiUpgrade fence-agents-sbdUpgrade fence-agents-epsUpgrade fence-agents-computeUpgrade fence-virtdUpgrade fence-agents-ipduUpgrade fence-agents-rsbUpgrade fence-agents-brocadeUpgrade fence-agents-openstackUpgrade fence-agents-virshUpgrade fence-agents-gceUpgrade fence-agents-eaton-snmpUpgrade fence-agents-allUpgrade fence-agents-ilo-mpUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-vmware-restUpgrade fence-agents-ilo-sshUpgrade ha-cloud-supportUpgrade fence-agents-rhevmUpgrade fence-virtd-multicastUpgrade fence-agents-apc-snmpUpgrade fence-agents-ipmilanUpgrade fence-agents-awsUpgrade fence-agents-zvmUpgrade fence-virtd-libvirtUpgrade fence-virtUpgrade fence-agents-commonUpgrade fence-agents-hpbladeUpgrade fence-agents-vmware-soapUpgrade fence-agents-amt-wsUpgrade fence-agents-kdumpUpgrade fence-agents-aliyunUpgrade fence-agents-ifmibUpgrade fence-agents-intelmodularUpgrade fence-virtd-cpgUpgrade fence-agents-emerson | May 15, 2023 | Sep 9, 2022 |
| Centos_linux | — | Upgrade fence-agents-debugsourceUpgrade fence-agents-ibm-vpcUpgrade fence-agents-commonUpgrade fence-agents-ibm-powervsUpgrade fence-agents-virshUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-kubevirtUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-debuginfo | May 15, 2023 | Sep 9, 2022 |
| Debian | — | Upgrade python-oauthlib | Jul 30, 2024 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-oauthlib | Jan 6, 2023 | Sep 9, 2022 |
| Oracle_linux | — | Upgrade fence-virtdUpgrade fence-agents-computeUpgrade fence-virtd-multicastUpgrade fence-virtd-cpgUpgrade fence-agents-ibm-powervsUpgrade fence-agents-ibm-vpcUpgrade fence-agents-commonUpgrade fence-virtd-serialUpgrade fence-virtd-libvirtUpgrade fence-virtUpgrade fence-agents-kubevirtUpgrade fence-agents-virshUpgrade fence-virtd-tcp | May 17, 2023 | Sep 9, 2022 |
| Redhat_linux | — | Upgrade fence-agents-wtiUpgrade fence-agents-cisco-ucsUpgrade fence-virtd-cpg-debuginfoUpgrade fence-agents-rsbUpgrade fence-virtd-libvirt-debuginfoUpgrade fence-agents-drac5Upgrade fence-agents-epsUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-redfishUpgrade fence-agents-vmware-restUpgrade fence-virtd-multicast-debuginfoUpgrade fence-virtdUpgrade fence-agents-ilo2Upgrade fence-agents-mpathUpgrade fence-virtd-tcp-debuginfoUpgrade fence-agents-hpbladeUpgrade fence-virtd-serialUpgrade fence-agents-lparUpgrade fence-agents-ibm-vpcUpgrade fence-agents-awsUpgrade fence-agents-computeUpgrade fence-virtd-cpgUpgrade fence-virtd-serial-debuginfoUpgrade fence-agents-rsaUpgrade fence-virtd-tcpUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-ibm-powervsUpgrade fence-agents-debugsourceUpgrade fence-agents-zvmUpgrade fence-agents-amt-wsUpgrade ha-cloud-support-debuginfoUpgrade fence-virtd-debuginfoUpgrade fence-agents-ilo-sshUpgrade fence-agents-virshUpgrade fence-agents-ifmibUpgrade fence-virtd-multicastUpgrade fence-virt-debuginfoUpgrade fence-agents-scsiUpgrade fence-agents-kubevirtUpgrade fence-agents-debuginfoUpgrade fence-agents-allUpgrade fence-agents-sbdUpgrade fence-agents-gceUpgrade fence-virtUpgrade fence-agents-kdumpUpgrade fence-agents-ipduUpgrade fence-agents-vmware-soapUpgrade fence-agents-azure-armUpgrade fence-agents-apcUpgrade ha-cloud-supportUpgrade fence-agents-bladecenterUpgrade fence-agents-intelmodularUpgrade fence-agents-cisco-mdsUpgrade fence-agents-eaton-snmpUpgrade fence-agents-apc-snmpUpgrade fence-agents-rhevmUpgrade fence-agents-ibmbladeUpgrade fence-agents-ilo-mpUpgrade fence-agents-heuristics-pingUpgrade fence-agents-aliyunUpgrade fence-agents-commonUpgrade fence-agents-emersonUpgrade fence-agents-ipmilanUpgrade fence-agents-brocadeUpgrade fence-agents-openstackUpgrade fence-virtd-libvirt | May 15, 2023 | Sep 9, 2022 |
| Ubuntu | — | Upgrade python3-oauthlib | Sep 23, 2022 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub