latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade joseUpgrade libjoseUpgrade libjose-devel | Aug 22, 2024 | Mar 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade joseUpgrade jose-debuginfoUpgrade libjoseUpgrade libjose-devel | May 1, 2024 | Mar 20, 2024 |
| Debian | — | Upgrade jose | Jul 30, 2024 | Mar 20, 2024 |
| Freebsd | — | Upgrade jose | Dec 10, 2025 | Apr 11, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade joseUpgrade libjoseUpgrade httpcomponents-coreUpgrade shared-mime-info | Jul 23, 2024 | Mar 20, 2024 |
| Oracle_linux | — | Upgrade joseUpgrade libjoseUpgrade libjose-devel | Oct 16, 2024 | Mar 20, 2024 |
| Redhat_linux | — | No solution existsUpgrade jose-debuginfoUpgrade jose-debugsourceUpgrade libjoseUpgrade libjose-debuginfoUpgrade joseUpgrade libjose-devel | Sep 13, 2024 | Mar 20, 2024 |
| Rocky_linux | — | Upgrade joseUpgrade libjose-debuginfoUpgrade jose-debugsourceUpgrade libjoseUpgrade jose-debuginfoUpgrade libjose-devel | Mar 18, 2025 | Mar 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub