A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-jwcrypto | Nov 19, 2024 | Feb 12, 2024 |
| Alpine Linux | — | Upgrade py3-jwcrypto | Aug 22, 2024 | Feb 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-jwcrypto | Apr 2, 2024 | Feb 12, 2024 |
| Debian | — | Upgrade python-jwcrypto | May 15, 2025 | Feb 12, 2024 |
| Oracle_linux | — | Upgrade ipa-python-compatUpgrade slapi-nisUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade python3-custodiaUpgrade softhsm-develUpgrade ipa-clientUpgrade ipa-healthcheckUpgrade ipa-server-dnsUpgrade python3-yubicoUpgrade python3-ipaserverUpgrade ipa-commonUpgrade ipa-selinuxUpgrade ipa-serverUpgrade ipa-client-epnUpgrade ipa-client-commonUpgrade ipa-client-sambaUpgrade softhsmUpgrade bind-dyndb-ldapUpgrade python3-pyusbUpgrade custodiaUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade python3-ipatestsUpgrade opendnssecUpgrade python3-ipaclientUpgrade ipa-server-commonUpgrade python3-jwcryptoUpgrade ipa-server-trust-adUpgrade python3-ipalib | Jun 1, 2024 | Dec 28, 2023 |
| Redhat_linux | — | Upgrade python3-jwcryptoNo solution exists | May 23, 2024 | Feb 12, 2024 |
| Rocky_linux | — | Upgrade slapi-nis-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade opendnssecUpgrade softhsm-develUpgrade ipa-serverUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-epnUpgrade ipa-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-client-sambaUpgrade opendnssec-debuginfoUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-clientUpgrade ipa-server-trust-adUpgrade slapi-nis-debugsourceUpgrade slapi-nisUpgrade ipa-debugsourceUpgrade softhsmUpgrade softhsm-debugsourceUpgrade opendnssec-debugsourceUpgrade ipa-server-debuginfoUpgrade ipa-client-debuginfo | Jun 17, 2024 | Feb 12, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub