Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-3048-1:41FF7
HistoryJun 08, 2022 - 7:42 p.m.

[SECURITY] [DLA 3048-1] python-bottle security update

2022-06-0819:42:49
lists.debian.org
22
debian lts
python-bottle
security update
cve-2022-31799
mishandling errors
debian 9 stretch
wsgi micro web-framework

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.014

Percentile

86.6%

JSON

Debian LTS Advisory DLA-3048-1 [email protected]
https://www.debian.org/lts/security/ Utkarsh Gupta
June 09, 2022 https://wiki.debian.org/LTS

Package : python-bottle
Version : 0.12.13-1+deb9u2
CVE ID : CVE-2022-31799

Bottle, which is a fast, simple and lightweight WSGI micro
web-framework for Pytho, mishandles errors during early request
binding.

For Debian 9 stretch, this problem has been fixed in version
0.12.13-1+deb9u2.

We recommend that you upgrade your python-bottle packages.

For the detailed security status of python-bottle please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/python-bottle

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian9allpython-bottle< 0.12.13-1+deb9u2python-bottle_0.12.13-1+deb9u2_all.deb
Debian10allpython-bottle< 0.12.15-2+deb10u2python-bottle_0.12.15-2+deb10u2_all.deb
Debian10allpython3-bottle< 0.12.15-2+deb10u2python3-bottle_0.12.15-2+deb10u2_all.deb
Debian9allpython-bottle-doc< 0.12.13-1+deb9u2python-bottle-doc_0.12.13-1+deb9u2_all.deb
Debian11allpython-bottle-doc< 0.12.19-1+deb11u1python-bottle-doc_0.12.19-1+deb11u1_all.deb
Debian11allpython-bottle< 0.12.19-1+deb11u1python-bottle_0.12.19-1+deb11u1_all.deb
Debian11allpython3-bottle< 0.12.19-1+deb11u1python3-bottle_0.12.19-1+deb11u1_all.deb
Debian10allpython-bottle-doc< 0.12.15-2+deb10u2python-bottle-doc_0.12.15-2+deb10u2_all.deb
Debian9allpython3-bottle< 0.12.13-1+deb9u2python3-bottle_0.12.13-1+deb9u2_all.deb

Related

ubuntu 2
amazon 1
nessus 8
nvd 1
debian 1
openvas 9
alpinelinux 1
github 1
cvelist 1
cve 1
ibm 3
debiancve 1
mageia 1
prion 1
suse 1
osv 7
fedora 2
veracode 1
ubuntucve 1
redos 1
ubuntu
ubuntu
Bottle vulnerability
2022-07-26 00:00:00
Bottle vulnerability
2022-07-26 00:00:00
amazon
amazon
Medium: python-bottle
2022-09-01 21:09:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Bottle vulnerability (USN-5532-1)
2022-07-26 00:00:00
Debian DSA-5159-1 : python-bottle - security update
2022-06-10 00:00:00
Amazon Linux 2 : python-bottle (ALAS-2022-1844)
2022-09-15 00:00:00
nvd
nvd
CVE-2022-31799
2022-06-02 14:15:58
debian
debian
[SECURITY] [DSA 5159-1] python-bottle security update
2022-06-09 21:07:12
openvas
openvas
Debian: Security Advisory (DLA-3048-1)
2022-06-09 00:00:00
openSUSE: Security Advisory for python-bottle (SUSE-SU-2022:3103-1)
2022-09-07 00:00:00
Ubuntu: Security Advisory (USN-5532-2)
2023-01-27 00:00:00
alpinelinux
alpinelinux
CVE-2022-31799
2022-06-02 14:15:58
github
github
Denial of service in bottle
2022-06-03 00:01:15
cvelist
cvelist
CVE-2022-31799
2022-05-29 21:25:44
cve
cve
CVE-2022-31799
2022-06-02 14:15:58
ibm
ibm
Security Bulletin: Vulnerability in bottle-0.12.16 affects IBM Cloud Pak for Data System 1.0(CPDS 1.0) [CVE-2022-31799]
2023-07-31 10:33:37
Security Bulletin: Vulnerability in bottle-0.12.16 affects IBM Integrated Analytics System [CVE-2022-31799]
2023-06-12 08:30:08
Security Bulletin: Vulnerability in paramiko-2.4.2-py2.py3-none-any.whl affects IBM Integrated Analytics System [CVE-2022-24302]
2023-06-08 13:40:11
debiancve
debiancve
CVE-2022-31799
2022-06-02 14:15:58
mageia
mageia
Updated python-bottle packages fix security vulnerability
2022-07-01 00:31:09
prion
prion
Cross site request forgery (csrf)
2022-06-02 14:15:00
suse
suse
Security update for python-bottle (important)
2022-09-06 00:00:00
osv
osv
python-bottle vulnerability
2022-07-26 14:07:42
python-bottle - security update
2022-06-09 00:00:00
Denial of service in bottle
2022-06-03 00:01:15
fedora
fedora
[SECURITY] Fedora 35 Update: python-bottle-0.12.21-2.fc35
2022-06-22 01:25:22
[SECURITY] Fedora 36 Update: python-bottle-0.12.21-2.fc36
2022-06-22 00:48:23
veracode
veracode
Validation Bypass
2022-06-03 05:15:09
ubuntucve
ubuntucve
CVE-2022-31799
2022-06-02 00:00:00
redos
redos
ROS-20240521-03
2024-05-21 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.014

Percentile

86.6%

JSON
Related for DEBIAN:DLA-3048-1:41FF7
ubuntu2amazon1nessus8nvd1debian1openvas9alpinelinux1github1cvelist1cve1ibm3debiancve1mageia1prion1suse1osv7fedora2veracode1ubuntucve1redos1