A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-jwcrypto | Nov 19, 2024 | Feb 12, 2024 |
| Alpine Linux | — | Upgrade py3-jwcrypto | Aug 22, 2024 | Feb 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-jwcrypto | Apr 2, 2024 | Feb 12, 2024 |
| Debian | — | Upgrade python-jwcrypto | May 15, 2025 | Feb 12, 2024 |
| Oracle_linux | — | Upgrade ipa-python-compatUpgrade ipa-clientUpgrade python3-qrcodeUpgrade ipa-serverUpgrade softhsm-develUpgrade python3-custodiaUpgrade ipa-selinuxUpgrade slapi-nisUpgrade ipa-client-epnUpgrade ipa-commonUpgrade python3-yubicoUpgrade ipa-healthcheck-coreUpgrade ipa-healthcheckUpgrade ipa-server-dnsUpgrade python3-ipaserverUpgrade custodiaUpgrade python3-ipalibUpgrade ipa-client-sambaUpgrade bind-dyndb-ldapUpgrade ipa-client-commonUpgrade python3-jwcryptoUpgrade python3-ipaclientUpgrade opendnssecUpgrade softhsmUpgrade ipa-server-trust-adUpgrade python3-pyusbUpgrade ipa-server-commonUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade python3-ipatests | Jun 1, 2024 | Dec 28, 2023 |
| Redhat_linux | — | Upgrade python3-jwcryptoNo solution exists | May 23, 2024 | Feb 12, 2024 |
| Rocky_linux | — | Upgrade ipa-client-epnUpgrade ipa-server-trust-ad-debuginfoUpgrade softhsm-develUpgrade bind-dyndb-ldap-debugsourceUpgrade opendnssec-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-sambaUpgrade slapi-nis-debuginfoUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-debuginfoUpgrade opendnssecUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-server-debuginfoUpgrade softhsm-debugsourceUpgrade slapi-nis-debugsourceUpgrade ipa-debugsourceUpgrade slapi-nisUpgrade ipa-server-trust-adUpgrade opendnssec-debugsourceUpgrade ipa-client-debuginfoUpgrade softhsm | Jun 17, 2024 | Feb 12, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 12, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub