CVE-2023-50966

Опубликовано: 19 мар. 2024

Источник: redhat

CVSS3: 6.5

EPSS Низкий

Описание

erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.

Отчет

This flaw doesn't affected any product currently supported by Red Hat.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2023-50966

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-400

https://bugzilla.redhat.com/show_bug.cgi?id=2270311erlang-jose: Denial-of-service due to high CPU consumption

EPSS

Процентиль: 3%

0.00019

Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVE-2023-50966

CVSS3: 5.3

ubuntu

больше 1 года назад

erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.

CVE-2023-50966

CVSS3: 5.3

nvd

больше 1 года назад

erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.

CVE-2023-50966

CVSS3: 5.3

msrc

9 месяцев назад

Описание отсутствует

CVE-2023-50966

CVSS3: 5.3

debian

больше 1 года назад

erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow atta ...

GHSA-9mg4-v392-8j68

CVSS3: 5.3

github

больше 1 года назад

erlang-jose vulnerable to denial of service via large p2c value

EPSS

Процентиль: 3%

0.00019

Низкий

6.5 Medium

CVSS3