Denial Of Service (DOS)

jwcrypto is vulnerable to Denial Of Service (DoS). The vulnerability is due to a missing upper bound check in the p2c header value (PBES2 count) which contains the PBKDF2 iteration count used in the PBKDF2 cryptographic key derivation function. The unbounded value can be exploited by an attacker to result in resource exhaustion due to a very high number of iterations leading to Denial Of Service (DoS).