Huawei EulerOS: Security Advisory for python-oauthlib (EulerOS-SA-2023-1020)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : python-oauthlib (EulerOS-SA-2023-1020)

According to the versions of the python-oauthlib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker...

EulerOS 2.0 SP11 : python-oauthlib (EulerOS-SA-2023-1045)

According to the versions of the python-oauthlib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker...

Security Bulletin: Vulnerability in OAuthlib affects IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift (CVE-2022-36087)

Summary Denial of service vulnerability in OAuthlib may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift. Vulnerability Details CVEID:CVE-2022-36087 DESCRIPTION: OAuthlib is vulnerable to a denial of service, caused by improper input validation. By sendin...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in OAuthLib

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of OAuthLib. Vulnerability Details CVEID:CVE-2022-36087 DESCRIPTION: OAuthlib is vulnerable to a denial of service, caused by improper input validation. By sending a specially-crafted request using IPV6 URI, a...

[SECURITY] Fedora 37 Update: python-oauthlib-3.2.1-1.fc37

OAuthLib is a generic utility which implements the logic of OAuth without assuming a specific HTTP request object or web framework. Use it to graft OAuth client support onto your favorite HTTP library, or provider support onto your favourite web framework. If you're a maintainer of such a library...

Fedora: Security Advisory for python-oauthlib (FEDORA-2022-5a74a5eea7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

USN-5632-1: OAuthLib vulnerability

Sebastian Chnelik discovered that OAuthLib incorrectly handled certain redirect uris. A remote attacker could possibly use this issue to cause OAuthLib to crash, resulting in a denial of service...

Ubuntu 22.04 LTS : OAuthLib vulnerability (USN-5632-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5632-1 advisory. Sebastian Chnelik discovered that OAuthLib incorrectly handled certain redirect uris. A remote attacker could possibly use this issue to cause OAuthLib to crash,...

CVE-2022-36087

A flaw was found in python-oauthlib. This flaw allows an attacker providing a malicious redirect URI to cause a denial of service to OAuthLib's web application. Mitigation The redirecturi can be verified in the web toolkit before OAuthLib is called. Check to see if : is present to reject the...

annalist (0.5.18), anoteai (>=0.10.0, <=0.20.0) +113 more potentially affected by CVE-2022-36087 via oauthlib (>=3.1.1, <=3.2.1)

oauthlib PYPI version =3.1.1, =0.10.0, =4.0.1, =0.2.1, =0.7.11, =0.2.11, =1.0.0, =1.1.71, =1.2.0, =0.3.7, =1.0.28, =0.3.0, =0.0.33, =0.1.0, =0.3.9 and more Source cves: CVE-2022-36087 Source advisory: OSV:GHSA-3PGJ-PG6C-R5P7...

annalist (0.5.18), anoteai (>=0.10.0, <=0.20.0) +113 more potentially affected by CVE-2022-36087 via oauthlib (>=3.1.1, <=3.2.1)

oauthlib PYPI version =3.1.1, =0.10.0, =4.0.1, =0.2.1, =0.7.11, =0.2.11, =1.0.0, =1.1.71, =1.2.0, =0.3.7, =1.0.28, =0.3.0, =0.0.33, =0.1.0, =0.3.9 and more Source cves: CVE-2022-36087 Source advisory: GHSA-3PGJ-PG6C-R5P7...

OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI

Impact - Attacker providing malicious redirect uri can cause DoS to oauthlib's web application. - Attacker can also leverage usage of urivalidate functions depending where it is used. What kind of vulnerability is it? Who is impacted? Oauthlib applications using OAuth2.0 provider support or use...

GHSA-3PGJ-PG6C-R5P7 OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI

Impact - Attacker providing malicious redirect uri can cause DoS to oauthlib's web application. - Attacker can also leverage usage of urivalidate functions depending where it is used. What kind of vulnerability is it? Who is impacted? Oauthlib applications using OAuth2.0 provider support or use...

CVE-2022-36087

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of urivalidate functions depending where it is used. OAuthLib...

CVE-2022-36087

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of urivalidate functions depending where it is used. OAuthLib...

annalist (0.5.18), anoteai (>=0.10.0, <=0.20.0) +92 more potentially affected by CVE-2022-36087 via oauthlib (>=3.1.1, <=3.2.0)

oauthlib PYPI version =3.1.1, =0.10.0, =0.2.1, =0.7.11, =0.2.11, =1.0.0, =1.1.71, =1.2.0, =0.3.7, =1.0.28, =0.0.33, =0.1.0, =0.0.1, =0.0.1, =1.4.1 and more Source cves: CVE-2022-36087 Source advisory: OSV:PYSEC-2022-269...

Design/Logic Flaw

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of urivalidate functions depending where it is used. OAuthLib...

CVE-2022-36087

CVE-2022-36087 affects Python OAuthLib (versions 3.1.1–3.2.1). An attacker supplying a malicious redirect URI could cause a denial of service, and there is potential impact related to the use of uri_validate depending on where it is used. The vulnerability specifically impacts OAuthLib applicatio...

CVE-2022-36087

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of "urivalidate" functions depending where it is used. OAuthLib...