Lucene search
OracleLinuxELSA-2024-2559HistoryMay 07, 2024 - 12:00 a.m.
python-jwcrypto security update
2024-05-0700:00:00
linux.oracle.com
4
security update
dos
high compression
rhel-28698
unix
6.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
[0.8-5]
- Address potential DoS with high compression ratio
Resolves: RHEL-28698
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 9 | src | python-jwcrypto | < 0.8-5.el9_4 | python-jwcrypto-0.8-5.el9_4.src.rpm |
| oracle linux | 9 | noarch | python3-jwcrypto | < 0.8-5.el9_4 | python3-jwcrypto-0.8-5.el9_4.noarch.rpm |
| oracle linux | 9 | src | python-jwcrypto | < 0.8-5.el9_4 | python-jwcrypto-0.8-5.el9_4.src.rpm |
| oracle linux | 9 | noarch | python3-jwcrypto | < 0.8-5.el9_4 | python3-jwcrypto-0.8-5.el9_4.noarch.rpm |
Related
nessus
nessus
RHEL 9 : python-jwcrypto (RHSA-2024:2559)
2024-04-30 00:00:00
Oracle Linux 9 : python-jwcrypto (ELSA-2024-2559)
2024-05-07 00:00:00
RHEL 7 : python-jwcrypto (Unpatched Vulnerability)
2024-05-11 00:00:00
osv
osv
Moderate: python-jwcrypto security update
2024-04-30 00:00:00
CVE-2024-28102
2024-03-21 02:52:23
Moderate: python-jwcrypto security update
2024-05-10 14:32:42
cve
cve
CVE-2024-28102
2024-03-21 02:52:23
redhat
redhat
(RHSA-2024:2559) Moderate: python-jwcrypto security update
2024-04-30 11:38:51
(RHSA-2024:3267) Moderate: idm:DL1 and idm:client security update
2024-05-22 10:41:24
almalinux
almalinux
Moderate: python-jwcrypto security update
2024-04-30 00:00:00
nvd
nvd
CVE-2024-28102
2024-03-21 02:52:23
redhatcve
redhatcve
CVE-2024-28102
2024-03-10 09:09:41
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2024-28102
2024-03-21 00:00:00
rocky
rocky
python-jwcrypto security update
2024-05-10 14:32:42
idm:DL1 and idm:client security update
2024-06-14 13:59:30
cgr
cgr
CVE-2024-28102 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2024-28102 vulnerabilities
2024-06-26 15:33:03
prion
prion
Code injection
2024-03-14 22:53:57
veracode
veracode
Denial Of Service (DoS)
2024-03-26 05:37:36
debiancve
debiancve
CVE-2024-28102
2024-03-21 02:52:23
github
github
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
2024-03-06 20:00:56
oraclelinux
oraclelinux
idm:DL1 and idm:client security update
2024-05-29 00:00:00
6.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for ELSA-2024-2559