Lucene search

K
osvGoogleOSV:GHSA-9MG4-V392-8J68
HistoryMar 19, 2024 - 3:30 p.m.

erlang-jose vulnerable to denial of service via large p2c value

2024-03-1915:30:34
Google
osv.dev
4
erlang-jose
vulnerable
denial of service
large p2c value

AI Score

6.4

Confidence

High

EPSS

0

Percentile

15.5%

erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.

AI Score

6.4

Confidence

High

EPSS

0

Percentile

15.5%