Fluid Attacks Database

Description

latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 13	jose	>=0 <13-1	13-1
debian 14	jose	>=0 <13-1	13-1
debian 11	jose	=10-3 \|\| >=0 <10-3+deb11u1	10-3+deb11u1
debian 12	jose	=11-2 \|\| >=0 <11-2+deb12u1	11-2+deb12u1
rpm rhel7	jose	-	-
rpm rhel8	jose	<0:10-2.el8_10.3	0:10-2.el8_10.3
rpm rhel9	jose	<0:14-1.el9	0:14-1.el9

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.