A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-jwcrypto | Nov 19, 2024 | Feb 12, 2024 |
| Alpine Linux | — | Upgrade py3-jwcrypto | Aug 22, 2024 | Feb 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-jwcrypto | Apr 2, 2024 | Feb 12, 2024 |
| Debian | — | Upgrade python-jwcrypto | May 15, 2025 | Feb 12, 2024 |
| Oracle_linux | — | Upgrade python3-kdcproxyUpgrade python3-qrcode-coreUpgrade python3-ipatestsUpgrade opendnssecUpgrade custodiaUpgrade bind-dyndb-ldapUpgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade python3-pyusbUpgrade python3-jwcryptoUpgrade ipa-server-commonUpgrade ipa-client-sambaUpgrade python3-ipalibUpgrade python3-ipaclientUpgrade softhsmUpgrade ipa-serverUpgrade softhsm-develUpgrade python3-custodiaUpgrade ipa-selinuxUpgrade ipa-healthcheck-coreUpgrade slapi-nisUpgrade ipa-python-compatUpgrade ipa-commonUpgrade ipa-client-epnUpgrade ipa-clientUpgrade python3-qrcodeUpgrade ipa-server-dnsUpgrade ipa-healthcheckUpgrade python3-ipaserverUpgrade python3-yubico | Jun 1, 2024 | Dec 28, 2023 |
| Redhat_linux | — | Upgrade python3-jwcryptoNo solution exists | May 23, 2024 | Feb 12, 2024 |
| Rocky_linux | — | Upgrade slapi-nis-debuginfoUpgrade ipa-client-epnUpgrade opendnssecUpgrade ipa-client-sambaUpgrade ipa-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade softhsm-develUpgrade ipa-server-trust-ad-debuginfoUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldapUpgrade opendnssec-debuginfoUpgrade ipa-clientUpgrade ipa-serverUpgrade bind-dyndb-ldap-debugsourceUpgrade slapi-nisUpgrade ipa-server-debuginfoUpgrade softhsm-debugsourceUpgrade softhsmUpgrade ipa-debugsourceUpgrade opendnssec-debugsourceUpgrade slapi-nis-debugsourceUpgrade ipa-client-debuginfoUpgrade ipa-server-trust-ad | Jun 17, 2024 | Feb 12, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub