Lucene search
Ubuntu.comUB:CVE-2024-33663HistoryApr 26, 2024 - 12:00 a.m.
CVE-2024-33663
2024-04-2600:00:00
ubuntu.com
ubuntu.com
7
cve-2024-33663
algorithm confusion
openssh
ecdsa
key formats
cve-2022-29217
unix
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys
and other key formats. This is similar to CVE-2022-29217.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 22.04 | noarch | python-jose | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | python-jose | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | python-jose | < any | UNKNOWN |
Related
debiancve
debiancve
CVE-2024-33663
2024-04-26 00:15:09
CVE-2022-29217
2022-05-24 15:15:00
github
github
python-jose algorithm confusion with OpenSSH ECDSA keys
2024-04-26 00:30:35
Key confusion through non-blocklisted public key formats
2022-05-24 22:17:27
cvelist
cvelist
CVE-2024-33663
2024-04-25 00:00:00
cve
cve
CVE-2024-33663
2024-04-26 00:15:09
CVE-2022-29217
2022-05-24 15:15:00
nessus
nessus
openSUSE 15 Security Update : python-python-jose (openSUSE-SU-2024:0118-1)
2024-05-08 00:00:00
Amazon Linux 2023 : python3-jwt, python3-jwt+crypto (ALAS2023-2023-076)
2023-03-21 00:00:00
SUSE SLED15 / SLES15 Security Update : python-PyJWT (SUSE-SU-2022:2402-1)
2022-07-15 00:00:00
osv
osv
python-jose algorithm confusion with OpenSSH ECDSA keys
2024-04-26 00:30:35
CVE-2024-33663
2024-04-26 00:15:09
Key confusion through non-blocklisted public key formats
2022-05-24 22:17:27
redhatcve
redhatcve
CVE-2024-33663
2024-04-26 06:04:23
CVE-2022-29217
2022-05-25 02:21:09
veracode
veracode
Improper Signature Validation
2024-04-29 06:33:23
Authentication Bypass
2022-05-25 07:35:03
openvas
openvas
openSUSE: Security Advisory for python (openSUSE-SU-2024:0118-1)
2024-05-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3545-1)
2022-10-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0794-1)
2023-03-28 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-29217 affecting package python-jwt 1.7.1-9
2022-07-14 20:59:55
CVE-2022-29217 affecting package python-jwt for versions less than 2.4.0-1
2022-06-26 03:29:33
suse
suse
Security update for python-PyJWT (important)
2022-07-14 00:00:00
prion
prion
Code injection
2022-05-24 15:15:00
ubuntu
ubuntu
PyJWT vulnerability
2022-07-20 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 35 Update: python-jwt-2.4.0-1.fc35
2022-06-01 01:27:09
[SECURITY] Fedora 36 Update: python-jwt-2.4.0-1.fc36
2022-05-27 01:10:44
ubuntucve
ubuntucve
CVE-2022-29217
2022-05-24 00:00:00
alpinelinux
alpinelinux
CVE-2022-29217
2022-05-24 15:15:00
mageia
mageia
Updated python-pyjwt packages fix security vulnerability
2022-07-01 00:31:09