EUVD-2022-0170

Malicious code in bioql PyPI...

TencentOS Server 4: python-oauthlib (TSSA-2024:0360)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0360 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Fedora 37 : python-oauthlib (2022-5a74a5eea7)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-5a74a5eea7 advisory. - Update spec file and sources for 3.2.1 - Fixes CVE-2022-36087 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 37 : python-oauthlib (2023-49ded4c9a5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-49ded4c9a5 advisory. Security fix for CVE-2022-36087 https://github.com/advisories/GHSA-3pgj-pg6c-r5p7 Tenable has extracted the preceding description block directly from the...

Ubuntu 22.04 LTS : OAuthLib vulnerability (USN-5632-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5632-1 advisory. Sebastian Chnelik discovered that OAuthLib incorrectly handled certain redirect uris. A remote attacker could possibly use this issue to cause OAuthLib to crash,...

CVE-2022-36087 OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of urivalidate functions depending where it is used. OAuthLib...

PT-2022-23176 · Oauthlib +5 · Oauthlib +5

Name of the Vulnerable Software and Affected Versions: OAuthLib versions 3.1.1 through 3.2.1 Description: The issue allows an attacker providing a malicious redirect uri to cause denial of service. An attacker can also leverage the usage of uri validate functions depending on where it is used...