Bottle before 0.12.20 mishandles errors during early request binding.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5532-2 advisory.

    USN-5532-1 fixed a vulnerability in Bottle. This update provides the corresponding update for Ubuntu 14.04     ESM and Ubuntu 16.04 ESM



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-082 advisory.

  - Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. (CVE-2022-3179)

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-205 advisory.

  - Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. (CVE-2022-3179)

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1844 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3103-1 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5532-1 advisory.

    It was discovered that Bottle incorrectly handled errors during early request

    binding. An attacker could possibly use this issue to disclose sensitive

    information. (CVE-2022-31799)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5159 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3048 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
183714	Ubuntu 16.04 ESM : Bottle vulnerability (USN-5532-2)	Nessus	Ubuntu Local Security Checks	critical
173109	Amazon Linux 2023 : python3-bottle (ALAS2023-2023-082)	Nessus	Amazon Linux Local Security Checks	critical
166987	Amazon Linux 2022 : (ALAS2022-2022-205)	Nessus	Amazon Linux Local Security Checks	critical
165098	Amazon Linux 2 : python-bottle (ALAS-2022-1844)	Nessus	Amazon Linux Local Security Checks	critical
164920	SUSE SLED15 / SLES15 Security Update : python-bottle (SUSE-SU-2022:3103-1)	Nessus	SuSE Local Security Checks	critical
163454	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Bottle vulnerability (USN-5532-1)	Nessus	Ubuntu Local Security Checks	critical
162013	Debian DSA-5159-1 : python-bottle - security update	Nessus	Debian Local Security Checks	critical
161962	Debian DLA-3048-1 : python-bottle - LTS security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2022-31799

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical