CVE-2024-33663

Опубликовано: 26 апр. 2024

Источник: redhat

EPSS Низкий

Описание

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Ansible Automation Platform 2	python-jose	Not affected
Red Hat Ansible Automation Platform 2.4 for RHEL 8	automation-controller	Fixed	RHSA-2024:6428	05.09.2024
Red Hat Ansible Automation Platform 2.4 for RHEL 9	automation-controller	Fixed	RHSA-2024:6428	05.09.2024

Показывать по

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=2277297python-jose: algorithm confusion with OpenSSH ECDSA keys and other key formats

EPSS

Процентиль: 23%

0.00074

Низкий

CVE-2024-33663

CVSS3: 6.5

ubuntu

около 1 года назад

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.

CVE-2024-33663

CVSS3: 6.5

nvd

около 1 года назад

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.

CVE-2024-33663

CVSS3: 6.5

debian

около 1 года назад

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA k ...

openSUSE-SU-2024:0118-1

suse-cvrf

около 1 года назад

Security update for python-python-jose

GHSA-6c5p-j8vq-pqhj

CVSS3: 7.4

github

около 1 года назад

python-jose algorithm confusion with OpenSSH ECDSA keys

EPSS

Процентиль: 23%

0.00074

Низкий