Logo
›
›vulnerability›CVE-2023-50967
Name
CVE-2023-50967
Source
NVD ( link)Debian ( link)
Description
latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CWEs
CWE-400
Published Date
Updated Date
Workaround
-
Advisories
https://github.com/P3ngu1nW/CVE_Request/blob/main/latch-jose.mdExploit
https://github.com/latchset/joseProduct
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CIFPQUCLNWEAHYYJWCQD3AZPWYIV6YT3/Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OOBFVMOAV732C7PY74AHJ62ZNKT3ISZ6/Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W7EGLOAFN2PWZ75ZRLTUDUZCIPH2VFZU/Mailing List
https://github.com/P3ngu1nW/CVE_Request/blob/main/latch-jose.mdExploit
https://github.com/latchset/joseProduct
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CIFPQUCLNWEAHYYJWCQD3AZPWYIV6YT3/Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OOBFVMOAV732C7PY74AHJ62ZNKT3ISZ6/Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W7EGLOAFN2PWZ75ZRLTUDUZCIPH2VFZU/Mailing List

Analysis#

Affected Component
Analysis
jose
Exploitable

Vulnerability Ratings#

7.5
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
jose
buildroot
2025.02.x
14
Not Affected
jose
buildroot
master
14
Not Affected