jose vulnerabilities (Ubuntu)
10 vulnerabilities.
-
joseUbuntu Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose 5.9 Medium -
joseUbuntu ECDSA signature length is not validated in jose, allowing signature malleability 5.1 Medium -
joseUbuntu erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service 6.9 Medium -
joseUbuntu Weak PBKDF2 parameters for password-encrypted private-key export in jose 7.4 High -
joseUbuntu Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types 5.9 Medium -
joseUbuntu Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2 6.9 Medium -
joseUbuntu Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose 5.9 Medium -
joseUbuntu Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose 5.9 Medium -
joseUbuntu latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption)... 7.5 High -
joseUbuntu JOSE vulnerable to resource exhaustion via specifically crafted JWE 5.3 Medium