USN-5532-1 — python-bottle vulnerability

Summary

It was discovered that Bottle incorrectly handled errors during early request
binding. An attacker could possibly use this issue to disclose sensitive
information. (CVE-2022-31799)

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	python-bottle	0.12.13-1ubuntu0.2
Ubuntu · 20.04 LTS 20.04:LTS	python-bottle	0.12.15-2.1ubuntu0.2
Ubuntu · 22.04 LTS 22.04:LTS	python-bottle	0.12.19-1+deb11u1build0.22.04.1

Vulnerabilities 1

Critical 9.8

CVE-2022-31799

Denial of service in bottle

Bottle before 0.12.20 mishandles errors during early request binding.

python-bottle bottle python-bottle py3-bottle Debian Ubuntu Alpine PyPI

May 29, 2022

References

report
https://ubuntu.com/security/CVE-2022-31799

python-bottle vulnerability

Summary

Fixed packages 3

Vulnerabilities 1

Denial of service in bottle

References