latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libjoseUpgrade libjose-develUpgrade jose | Aug 22, 2024 | Mar 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade libjoseUpgrade libjose-develUpgrade jose-debuginfoUpgrade jose | May 1, 2024 | Mar 20, 2024 |
| Debian | — | Upgrade jose | Jul 30, 2024 | Mar 20, 2024 |
| Freebsd | — | Upgrade jose | Dec 10, 2025 | Apr 11, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade joseUpgrade libjoseUpgrade shared-mime-infoUpgrade httpcomponents-core | Jul 23, 2024 | Mar 20, 2024 |
| Oracle_linux | — | Upgrade joseUpgrade libjoseUpgrade libjose-devel | Oct 16, 2024 | Mar 20, 2024 |
| Redhat_linux | — | No solution existsUpgrade libjose-develUpgrade jose-debuginfoUpgrade joseUpgrade jose-debugsourceUpgrade libjose-debuginfoUpgrade libjose | Sep 13, 2024 | Mar 20, 2024 |
| Rocky_linux | — | Upgrade jose-debugsourceUpgrade libjoseUpgrade joseUpgrade libjose-debuginfoUpgrade jose-debuginfoUpgrade libjose-devel | Mar 18, 2025 | Mar 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub