latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade joseUpgrade libjoseUpgrade libjose-devel | Aug 22, 2024 | Mar 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade jose-debuginfoUpgrade libjoseUpgrade libjose-develUpgrade jose | May 1, 2024 | Mar 20, 2024 |
| Debian | — | Upgrade jose | Jul 30, 2024 | Mar 20, 2024 |
| Freebsd | — | Upgrade jose | Dec 10, 2025 | Apr 11, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade shared-mime-infoUpgrade httpcomponents-coreUpgrade libjoseUpgrade jose | Jul 23, 2024 | Mar 20, 2024 |
| Oracle_linux | — | Upgrade libjose-develUpgrade joseUpgrade libjose | Oct 16, 2024 | Mar 20, 2024 |
| Redhat_linux | — | No solution existsUpgrade jose-debuginfoUpgrade libjoseUpgrade libjose-debuginfoUpgrade jose-debugsourceUpgrade libjose-develUpgrade jose | Sep 13, 2024 | Mar 20, 2024 |
| Rocky_linux | — | Upgrade libjose-debuginfoUpgrade jose-debugsourceUpgrade joseUpgrade libjoseUpgrade jose-debuginfoUpgrade libjose-devel | Mar 18, 2025 | Mar 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub