Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-6681

Jwcrypto: denail of service via specifically crafted jwe

Description

A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 8100020240417004735.143e9e98 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 8100020240416171943.823393f5 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:1.5.6-2.el9 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

References