Lucene search
GoogleOSV:GHSA-RV8H-P43R-4X5RHistoryMay 17, 2022 - 3:46 a.m.
SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces
2022-05-1703:46:28
Google
osv.dev
4
0.003 Low
EPSS
Percentile
66.0%
The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.
References
www.openwall.com/lists/oss-security/2013/09/12/7
www.securityfocus.com/bid/62388
access.redhat.com/errata/RHSA-2015:1591
access.redhat.com/errata/RHSA-2015:1592
access.redhat.com/security/cve/CVE-2013-4347
bugzilla.redhat.com/show_bug.cgi?id=1007758
github.com/joestump/python-oauth2
github.com/joestump/python-oauth2/commit/82dd2cdd4954cd7b8983d5d64c0dfd9072bf4650
github.com/simplegeo/python-oauth2/issues/9
github.com/simplegeo/python-oauth2/pull/146
nvd.nist.gov/vuln/detail/CVE-2013-4347
Related
cve
cve
CVE-2013-4347
2014-05-20 14:55:04
osv
osv
PYSEC-2014-86
2014-05-20 14:55:00
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0314)
2022-01-28 00:00:00
Fedora Update for python-oauth2 FEDORA-2014-10784
2014-10-01 00:00:00
Fedora Update for python-oauth2 FEDORA-2014-10786
2014-10-01 00:00:00
prion
prion
Code injection
2014-05-20 14:55:00
github
github
ubuntucve
ubuntucve
CVE-2013-4347
2014-05-20 00:00:00
nvd
nvd
CVE-2013-4347
2014-05-20 14:55:04
cvelist
cvelist
CVE-2013-4347
2014-05-20 14:00:00
mageia
mageia
Updated python-oauth2 packages fix CVE-2013-4347
2013-10-26 00:53:17
nessus
nessus
Fedora 21 : python-oauth2-1.5.211-8.fc21 (2014-12483)
2014-11-03 00:00:00
Fedora 19 : python-oauth2-1.5.211-7.fc19 (2014-10784)
2014-09-29 00:00:00
Fedora 19 : python-oauth2-1.5.211-8.fc19 (2014-12536)
2014-10-29 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: python-oauth2-1.5.211-7.fc20
2014-09-26 09:06:33
[SECURITY] Fedora 19 Update: python-oauth2-1.5.211-8.fc19
2014-10-28 06:43:39
[SECURITY] Fedora 21 Update: python-oauth2-1.5.211-8.fc21
2014-11-01 16:22:17
amazon
amazon
Medium: python-oauth2
2014-10-14 10:04:00
veracode
veracode
Man-In-The-Middle (MitM)
2019-05-02 05:42:16
Cross-Site Scripting (XSS)
2019-05-02 05:42:13
Privilege Escalation
2019-05-02 05:42:19
redhat
redhat
(RHSA-2015:1592) Important: Red Hat Satellite 6.1.1 on RHEL 6
2015-08-12 04:47:35
(RHSA-2015:1591) Important: Red Hat Satellite 6.1.1 on RHEL 7
2015-08-12 04:38:51