latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade joseUpgrade libjoseUpgrade libjose-devel | Aug 22, 2024 | Mar 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade jose-debuginfoUpgrade libjoseUpgrade libjose-develUpgrade jose | May 1, 2024 | Mar 20, 2024 |
| Debian | — | Upgrade jose | Jul 30, 2024 | Mar 20, 2024 |
| Freebsd | — | Upgrade jose | Dec 10, 2025 | Apr 11, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libjoseUpgrade joseUpgrade shared-mime-infoUpgrade httpcomponents-core | Jul 23, 2024 | Mar 20, 2024 |
| Oracle_linux | — | Upgrade libjose-develUpgrade libjoseUpgrade jose | Oct 16, 2024 | Mar 20, 2024 |
| Redhat_linux | — | No solution existsUpgrade libjose-develUpgrade jose-debugsourceUpgrade jose-debuginfoUpgrade libjoseUpgrade libjose-debuginfoUpgrade jose | Sep 13, 2024 | Mar 20, 2024 |
| Rocky_linux | — | Upgrade libjose-develUpgrade jose-debuginfoUpgrade joseUpgrade libjoseUpgrade jose-debugsourceUpgrade libjose-debuginfo | Mar 18, 2025 | Mar 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub