CVE-2023-31582

2023-10-2500:00:00

ubuntu.com

cve-2023-31582

iteration count

unix

0.0005 Low

EPSS

Percentile

16.8%

JSON

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000
or less.

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlibjose4j-java< anyUNKNOWN
ubuntu23.10noarchlibjose4j-java< anyUNKNOWN
ubuntu24.04noarchlibjose4j-java< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	libjose4j-java	< any	UNKNOWN
ubuntu	23.10	noarch	libjose4j-java	< any	UNKNOWN
ubuntu	24.04	noarch	libjose4j-java	< any	UNKNOWN

References

bitbucket.org/b_c/jose4j/issues/203/insecure-support-of-setting-pbe-less-then

github.com/KANIXB/JWTIssues/blob/main/jose4j%20issue.md

launchpad.net/bugs/cve/CVE-2023-31582

nvd.nist.gov/vuln/detail/CVE-2023-31582

security-tracker.debian.org/tracker/CVE-2023-31582

www.cve.org/CVERecord?id=CVE-2023-31582

0.0005 Low

EPSS

Percentile

16.8%

JSON

Related for UB:CVE-2023-31582