latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade joseUpgrade libjose-develUpgrade libjose | Aug 22, 2024 | Mar 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade jose-debuginfoUpgrade libjose-develUpgrade libjoseUpgrade jose | May 1, 2024 | Mar 20, 2024 |
| Debian | — | Upgrade jose | Jul 30, 2024 | Mar 20, 2024 |
| Freebsd | — | Upgrade jose | Dec 10, 2025 | Apr 11, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libjoseUpgrade httpcomponents-coreUpgrade shared-mime-infoUpgrade jose | Jul 23, 2024 | Mar 20, 2024 |
| Oracle_linux | — | Upgrade joseUpgrade libjoseUpgrade libjose-devel | Oct 16, 2024 | Mar 20, 2024 |
| Redhat_linux | — | Upgrade libjoseUpgrade libjose-develUpgrade jose-debugsourceUpgrade libjose-debuginfoUpgrade jose-debuginfoUpgrade joseNo solution exists | Sep 13, 2024 | Mar 20, 2024 |
| Rocky_linux | — | Upgrade joseUpgrade jose-debugsourceUpgrade libjoseUpgrade libjose-debuginfoUpgrade libjose-develUpgrade jose-debuginfo | Mar 18, 2025 | Mar 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub