Lucene search
Gentoo FoundationMGASA-2013-0314HistoryOct 26, 2013 - 12:53 a.m.
Updated python-oauth2 packages fix CVE-2013-4347
2013-10-2600:53:17
Gentoo Foundation
advisories.mageia.org
16
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.003 Low
EPSS
Percentile
66.0%
It was found that in python-oauth2, an application for authorization flows for web applications, the nonce value generated isn’t sufficiently random. While doing bulk operations the nonce might be repeated, so there is a chance of predictability. This could allow MITM attackers to conduct replay attacks. (CVE-2013-4347)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 2 | noarch | python-oauth2 | < 1.5.170-1.3 | python-oauth2-1.5.170-1.3.mga2 |
| Mageia | 3 | noarch | python-oauth2 | < 1.5.170-2.3 | python-oauth2-1.5.170-2.3.mga3 |
References
Related
prion
prion
Code injection
2014-05-20 14:55:00
github
github
ubuntucve
ubuntucve
CVE-2013-4347
2014-05-20 00:00:00
nvd
nvd
CVE-2013-4347
2014-05-20 14:55:04
cve
cve
CVE-2013-4347
2014-05-20 14:55:04
osv
osv
PYSEC-2014-86
2014-05-20 14:55:00
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0314)
2022-01-28 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-425)
2015-09-08 00:00:00
Fedora Update for python-oauth2 FEDORA-2014-12536
2014-10-29 00:00:00
cvelist
cvelist
CVE-2013-4347
2014-05-20 14:00:00
nessus
nessus
Fedora 19 : python-oauth2-1.5.211-7.fc19 (2014-10784)
2014-09-29 00:00:00
Fedora 19 : python-oauth2-1.5.211-8.fc19 (2014-12536)
2014-10-29 00:00:00
Amazon Linux AMI : python-oauth2 (ALAS-2014-425)
2014-10-15 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: python-oauth2-1.5.211-8.fc19
2014-10-28 06:43:39
[SECURITY] Fedora 21 Update: python-oauth2-1.5.211-7.fc21
2014-09-27 09:51:21
[SECURITY] Fedora 20 Update: python-oauth2-1.5.211-8.fc20
2014-10-28 06:45:57
amazon
amazon
Medium: python-oauth2
2014-10-14 10:04:00
veracode
veracode
Man-In-The-Middle (MitM)
2019-05-02 05:42:16
Cross-Site Scripting (XSS)
2019-05-02 05:42:13
Privilege Escalation
2019-05-02 05:42:19
redhat
redhat
(RHSA-2015:1592) Important: Red Hat Satellite 6.1.1 on RHEL 6
2015-08-12 04:47:35
(RHSA-2015:1591) Important: Red Hat Satellite 6.1.1 on RHEL 7
2015-08-12 04:38:51
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.003 Low
EPSS
Percentile
66.0%
Related for MGASA-2013-0314