SUSE SLES15 Security Update : SUSE Manager Server 4.3 (SUSE-SU-2024:1507-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:1507-1 advisory. - The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

CVE-2023-51775

CVE-2023-51775 affects the jose4j Java library, prior to 0.9.4. The issue allows an attacker to cause a denial of service (high CPU usage) by sending a large PBES2 Count (p2c) value. The IBM bulletin confirms the CVE and describes the vulnerability as a resource exhaustion in jose4j. Remediation ...