Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-6681
HistoryFeb 12, 2024 - 12:00 a.m.

CVE-2023-6681

2024-02-1200:00:00
ubuntu.com
ubuntu.com
13
jwcrypto
dos attack
password brute-force
dictionary attack
computational consumption
bugzilla
redhat
unix

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

7.1

Confidence

High

EPSS

0

Percentile

15.5%

A vulnerability was found in JWCrypto. This flaw allows an attacker to
cause a denial of service (DoS) attack and possible password brute-force
and dictionary attacks to be more resource-intensive. This issue can result
in a large amount of computational consumption, causing a denial of service
attack.

Bugs

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

7.1

Confidence

High

EPSS

0

Percentile

15.5%