Количество 30
Количество 30
BDU:2024-01928
Уязвимость пакета реализации набора стандартов JWE, JWS, JWT go-jose для языка программирования Go, связанная с некорректной обработкой сильно сжатых входных данных, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260209-73-0033
Уязвимость golang-github-jose
ROS-20240718-03
Уязвимость consul
ROS-20241112-03
Множественные уязвимости packer
CVE-2024-28180
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3.
CVE-2024-28180
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3.
CVE-2024-28180
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3.
CVE-2024-28180
CVE-2024-28180
Package jose aims to provide an implementation of the Javascript Objec ...
SUSE-SU-2025:0066-1
Security update for apptainer
SUSE-SU-2024:2754-1
Security update for skopeo
GHSA-c5q2-7r4c-mv6g
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
SUSE-SU-2024:1987-1
Security update for skopeo
RLSA-2024:3968
Moderate: container-tools:rhel8 bug fix and enhancement update
RLSA-2024:2549
Moderate: skopeo security and bug fix update
ELSA-2024-3968
ELSA-2024-3968: container-tools:ol8 bug fix and enhancement update (MODERATE)
ELSA-2024-2549
ELSA-2024-2549: skopeo security and bug fix update (MODERATE)
openSUSE-SU-2026:20279-1
Security update for containerized-data-importer
RLSA-2024:3827
Moderate: buildah security and bug fix update
RLSA-2024:3826
Moderate: podman security and bug fix update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-01928 Уязвимость пакета реализации набора стандартов JWE, JWS, JWT go-jose для языка программирования Go, связанная с некорректной обработкой сильно сжатых входных данных, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.3 | 2% Низкий | больше 2 лет назад |
 | ROS-20260209-73-0033 Уязвимость golang-github-jose | CVSS3: 4.3 | 2% Низкий | 5 месяцев назад |
| ROS-20240718-03 Уязвимость consul | CVSS3: 4.3 | 2% Низкий | почти 2 года назад |
| ROS-20241112-03 Множественные уязвимости packer | CVSS3: 5.3 | больше 1 года назад | |
 | CVE-2024-28180 Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3. | CVSS3: 4.3 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-28180 Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3. | CVSS3: 4.3 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-28180 Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3. | CVSS3: 4.3 | 2% Низкий | больше 2 лет назад |
 | CVSS3: 4.3 | 2% Низкий | больше 1 года назад | |
| CVE-2024-28180 Package jose aims to provide an implementation of the Javascript Objec ... | CVSS3: 4.3 | 2% Низкий | больше 2 лет назад |
 | SUSE-SU-2025:0066-1 Security update for apptainer | 2% Низкий | больше 1 года назад | |
| SUSE-SU-2024:2754-1 Security update for skopeo | 2% Низкий | почти 2 года назад | |
| GHSA-c5q2-7r4c-mv6g Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) | CVSS3: 4.3 | 2% Низкий | больше 2 лет назад |
| SUSE-SU-2024:1987-1 Security update for skopeo | около 2 лет назад | ||
 | RLSA-2024:3968 Moderate: container-tools:rhel8 bug fix and enhancement update | почти 2 года назад | ||
| RLSA-2024:2549 Moderate: skopeo security and bug fix update | около 2 лет назад | ||
| ELSA-2024-3968 ELSA-2024-3968: container-tools:ol8 bug fix and enhancement update (MODERATE) | около 2 лет назад | ||
| ELSA-2024-2549 ELSA-2024-2549: skopeo security and bug fix update (MODERATE) | около 2 лет назад | ||
| openSUSE-SU-2026:20279-1 Security update for containerized-data-importer | 4 месяца назад | ||
| RLSA-2024:3827 Moderate: buildah security and bug fix update | около 2 лет назад | ||
| RLSA-2024:3826 Moderate: podman security and bug fix update | около 2 лет назад |
Уязвимостей на страницу