Veracode Vulnerability DatabaseVERACODE:46374Denial Of Service (DoS)
jose is vulnerable to Denial Of Service (DoS). The vulnerability is due to insufficient validation of the p2c (PBES2 Count) value. It allows attackers can exploit this vulnerability by providing a large p2c value, leading to a denial of service condition.
References
github.com/latchset/jose
github.com/P3ngu1nW/CVE_Request/blob/main/latch-jose.md
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CIFPQUCLNWEAHYYJWCQD3AZPWYIV6YT3/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OOBFVMOAV732C7PY74AHJ62ZNKT3ISZ6/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W7EGLOAFN2PWZ75ZRLTUDUZCIPH2VFZU/
security-tracker.debian.org/tracker/CVE-2023-50967
Related
