Lucene search
GoogleOSV:CVE-2024-33664HistoryApr 26, 2024 - 12:15 a.m.
CVE-2024-33664
2024-04-2600:15:09
Google
osv.dev
4
python-jose
denial of service
json web encryption
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a “JWT bomb.” This is similar to CVE-2024-21319.
| CPE | Name | Operator | Version |
|---|---|---|---|
| python-jose | eq | 1.3.0 | |
| python-jose | eq | 0.6.2 | |
| python-jose | eq | 0.6.0 | |
| python-jose | eq | 0.6.1 | |
| python-jose | eq | 1.4.0 | |
| python-jose | eq | 3.0.1 | |
| python-jose | eq | 3.1.0 | |
| python-jose | eq | 0.5.3 | |
| python-jose | eq | 1.1.0 | |
| python-jose | eq | 1.3.2 |
Related
ubuntucve
ubuntucve
CVE-2024-33664
2024-04-26 00:00:00
CVE-2024-21319
2024-01-09 00:00:00
redhatcve
redhatcve
CVE-2024-33664
2024-04-26 06:04:33
CVE-2024-21319
2024-01-10 05:02:11
cvelist
cvelist
CVE-2024-33664
2024-04-25 00:00:00
CVE-2024-21319 Microsoft Identity Denial of service vulnerability
2024-01-09 18:59:01
cve
cve
CVE-2024-33664
2024-04-26 00:15:09
CVE-2024-21319
2024-01-09 19:15:12
debiancve
debiancve
CVE-2024-33664
2024-04-26 00:15:09
osv
osv
python-jose denial of service via compressed JWE content
2024-04-26 00:30:35
Microsoft ASP.NET Core project templates vulnerable to denial of service
2024-01-09 19:35:02
Microsoft Identity Denial of service vulnerability
2024-01-09 18:28:03
github
github
python-jose denial of service via compressed JWE content
2024-04-26 00:30:35
Microsoft ASP.NET Core project templates vulnerable to denial of service
2024-01-09 19:35:02
JWX vulnerable to a denial of service attack using compressed JWE message
2024-03-08 15:06:53
veracode
veracode
Denial Of Service (DoS)
2024-04-29 07:50:48
Denial Of Service (DoS)
2024-01-10 10:01:02
prion
prion
Denial of service
2024-01-09 19:15:00
mscve
mscve
Microsoft Identity Denial of service vulnerability
2024-01-09 08:00:00
alpinelinux
alpinelinux
CVE-2024-21319
2024-01-09 19:15:12
nessus
nessus
Ubuntu 22.04 LTS / 23.04 / 23.10 : .NET vulnerabilities (USN-6578-1)
2024-01-11 00:00:00
AlmaLinux 9 : .NET 7.0 (ALSA-2024:0151)
2024-01-12 00:00:00
AlmaLinux 9 : .NET 6.0 (ALSA-2024:0156)
2024-01-12 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6578-1)
2024-01-12 00:00:00
.NET Core Multiple Vulnerabilities (KB5033741)
2024-01-11 00:00:00
.NET Core Multiple Vulnerabilities (KB5033733)
2024-01-11 00:00:00
kaspersky
kaspersky
KLA62826 Multiple vulnerabilities in Microsoft Azure
2024-01-09 00:00:00
KLA62822 Multiple vulnerabilities in Microsoft Developer Tools
2024-01-09 00:00:00
ubuntu
ubuntu
.NET vulnerabilities
2024-01-11 00:00:00
almalinux
almalinux
Important: .NET 7.0 security update
2024-01-10 00:00:00
Important: .NET 8.0 security update
2024-01-10 00:00:00
Important: .NET 6.0 security update
2024-01-10 00:00:00
oraclelinux
oraclelinux
.NET 7.0 security update
2024-01-17 00:00:00
.NET 6.0 security update
2024-01-12 00:00:00
.NET 8.0 security update
2024-02-20 00:00:00
redhat
redhat
(RHSA-2024:0152) Important: .NET 8.0 security update
2024-01-10 15:18:52
(RHSA-2024:0150) Important: .NET 8.0 security update
2024-01-10 15:15:53
rocky
rocky
.NET 8.0 security update
2024-01-12 19:57:42
.NET 6.0 security update
2024-01-12 19:57:42
.NET 7.0 security update
2024-01-12 19:57:42
mskb
mskb
.NET 8.0 Update - January 09, 2024 (KB5033741)
2024-01-09 08:00:00
.NET 7.0 Update - January 09, 2024 (KB5033734)
2024-01-09 08:00:00
.NET 6.0 Update - January 09, 2024 (KB5033733)
2024-01-09 08:00:00
rapid7blog
rapid7blog
Patch Tuesday - January 2024
2024-01-09 21:23:10