CVE-2023-25653 Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)

🗓️ 16 Feb 2023 18:27:15Reported by GitHub_MType

Improper ECC calculations can trigger Denial-of-Service in node-jose prior to v2.2.

Reporter	Title	Published	Views	Family All 9
OSV	Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)	16 Feb 202318:44	–	osv
OSV	CVE-2023-25653	16 Feb 202319:15	–	osv
NVD	CVE-2023-25653	16 Feb 202319:15	–	nvd
Github Security Blog	Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)	16 Feb 202318:44	–	github
CVE	CVE-2023-25653	16 Feb 202319:15	–	cve
Veracode	Denial Of Service (DoS)	17 Feb 202303:46	–	veracode
Prion	Input validation	16 Feb 202319:15	–	prion
IBM Security Bulletins	Security Bulletin: Cisco node-jose is vulnerable to CVE-2023-25653 used in IBM Maximo Application Suite - Monitor Component	24 Jul 202317:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Information Queue has multiple third-party library vulnerabilities	16 May 202316:18	–	ibm

[
  {
    "vendor": "cisco",
    "product": "node-jose",
    "versions": [
      {
        "version": "< 2.2.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/cisco/node-jose/security/advisories/GHSA-5h4j-qrvg-9xhw
github	www.github.com/cisco/node-jose/commit/901d91508a70e3b9bdfc45688ea07bb4e1b8210d

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Feb 2023 18:15Current

7.6High risk

Vulners AI Score7.6

EPSS0.001

CWE-835