Resource Exhaustion Affecting python3-jwcrypto package, versions <0:1.5.6-2.el9
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-ALMALINUX9-PYTHON3JWCRYPTO-8383548
- published 18 Nov 2024
- disclosed 12 Nov 2024
Introduced: 12 Nov 2024
New CVE-2023-6681 Open this link in a new tabHow to fix?
Upgrade AlmaLinux:9 python3-jwcrypto to version 0:1.5.6-2.el9 or higher.
This issue was patched in ALSA-2024:9281.
NVD Description
Note: Versions mentioned in the description apply only to the upstream python3-jwcrypto package and not the python3-jwcrypto package as distributed by AlmaLinux.
See How to fix? for AlmaLinux:9 relevant fixed versions and status.
A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service attack.