CVE-2023-50967

See a problem?

Source

https://nvd.nist.gov/vuln/detail/CVE-2023-50967

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-50967.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-50967

Related

Published

2024-03-20T16:15:07Z

Modified

2024-09-11T04:58:49.453054Z

Summary

[none]

Details

latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

References

Affected packages

Debian:11 / jose

Package

Name: jose
Purl: pkg:deb/debian/jose?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10-3+deb11u1

Affected versions

Other

10-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / jose

Package

Name: jose
Purl: pkg:deb/debian/jose?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

11-2+deb12u1

Affected versions

Other

11-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / jose

Package

Name: jose
Purl: pkg:deb/debian/jose?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

13-1

Affected versions

Other

11-2

11-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/latchset/jose

Affected ranges

Type: GIT
Repo: https://github.com/latchset/jose
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

145c41a4ec70c15f6f8aa12a915e16cb60f0991f

Affected versions

Other

v10

v11