Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-52428

Fixed in a distro release EPSS <1%CVSS 7.5

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

Published 2024-02-11 · CVE record · OSV

Products: connect2id nimbus_jose+jwt

Fixed upstream

EcosystemPackageFixed in
Mavencom.nimbusds:nimbus-jose-jwt9.37.2

Distro releases

ReleasePackageFixed in
Chainguardceleborn-0.50.5.4-r26
Chainguardceleborn-0.60.6.3-r7
Chainguarddependency-track4.10.1-r3
Chainguarddependency-track-bundled4.10.1-r3
Chainguarddruid37.0.0-r14
Chainguarddruid34.0.0-r6
Chainguarddruid37.0.0-r56
Chainguardelasticsearch-77.17.20-r0
Chainguardelasticsearch-7-iamguarded7.17.20-r0
Chainguardhadoop-client-modules3.3.6-r7
Chainguardrangerno fix
Chainguardsonarqube-1025.1.0.102122-r0
Chainguardspark-3.5-scala-2.12no fix
Chainguardspark-3.5-scala-2.13no fix
Chainguardtez0.10.4-r6
Chainguardthingsboard3.7-r2
Chainguardthingsboard-tb-js-executor3.7-r2
Chainguardthingsboard-tb-mqtt-transport3.7-r2
Chainguardthingsboard-tb-node3.7-r2
Chainguardthingsboard-tb-web-ui3.7-r2
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-cli0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-cli0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-commons0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-commons0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-core-client0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-core-client0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-dto0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-dto0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-hornetq-protocol0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-hornetq-protocol0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-hqclient-protocol0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-hqclient-protocol0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-client0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-client0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-ra0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-ra0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-server0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-server0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-service-extensions0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-service-extensions0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jdbc-store0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jdbc-store0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-journal0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-journal0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-native1:2.0.0-2.redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-native1:2.0.0-2.redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-selector0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-selector0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-server0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-server0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aesh-extensions0:1.8.0-2.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aesh-extensions0:1.8.0-2.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aesh-readline0:2.2.0-2.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aesh-readline0:2.2.0-2.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-codec0:1.16.1-2.redhat_00007.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-codec0:1.16.1-2.redhat_00007.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-collections0:3.2.2-28.redhat_2.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-collections0:3.2.2-28.redhat_2.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-io0:2.15.1-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-io0:2.15.1-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-lang0:3.14.0-2.redhat_00006.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-lang0:3.14.0-2.redhat_00006.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf0:4.0.5-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf0:4.0.5-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-rt0:4.0.5-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-rt0:4.0.5-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-services0:4.0.5-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-services0:4.0.5-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-tools0:4.0.5-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-tools0:4.0.5-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-native1:2.0.0-2.redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-native1:2.0.0-2.redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-native-wildfly1:2.0.0-2.redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-native-wildfly1:2.0.0-2.redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-wildfly-integration0:2.0.1-1.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-wildfly-integration0:2.0.1-1.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-asyncutil0:0.1.0-2.redhat_00010.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-asyncutil0:0.1.0-2.redhat_00010.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk0:1.12.284-2.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk0:1.12.284-2.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-core0:1.12.284-2.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-core0:1.12.284-2.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-kms0:1.12.284-2.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-kms0:1.12.284-2.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-s30:1.12.284-2.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-s30:1.12.284-2.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-cryptacular0:1.2.5-2.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-cryptacular0:1.2.5-2.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-eap-product-conf-parent0:800.4.0-1.GA_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-eap-product-conf-parent0:800.4.0-1.GA_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-eap-product-conf-wildfly-ee-feature-pack0:800.4.0-1.GA_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-eap-product-conf-wildfly-ee-feature-pack0:800.4.0-1.GA_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-fastinfoset0:2.1.0-4.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-fastinfoset0:2.1.0-4.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate0:6.2.31-1.Final_redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate0:6.2.31-1.Final_redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-core0:6.2.31-1.Final_redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-core0:6.2.31-1.Final_redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-envers0:6.2.31-1.Final_redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-envers0:6.2.31-1.Final_redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-validator0:8.0.1-3.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-validator0:8.0.1-3.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-validator-cdi0:8.0.1-3.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-validator-cdi0:8.0.1-3.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hppc0:0.8.1-2.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hppc0:0.8.1-2.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-insights-java-client0:1.1.3-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-insights-java-client0:1.1.3-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jakarta-servlet-jsp-jstl0:3.0.1-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jakarta-servlet-jsp-jstl0:3.0.1-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jakarta-servlet-jsp-jstl-api0:3.0.1-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jakarta-servlet-jsp-jstl-api0:3.0.1-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jboss-cert-helper0:1.1.3-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jboss-cert-helper0:1.1.3-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jboss-logging0:3.5.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jboss-logging0:3.5.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jctools0:4.0.2-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jctools0:4.0.2-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jctools-core0:4.0.2-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jctools-core0:4.0.2-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jgroups0:5.3.10-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jgroups0:5.3.10-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jmespath-java0:1.12.284-2.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jmespath-java0:1.12.284-2.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-log4j0:2.22.1-1.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-log4j0:2.22.1-1.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jbosstxbridge0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jbosstxbridge0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jbossxts0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jbossxts0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jts-idlj0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jts-idlj0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jts-integration0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jts-integration0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-api0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-api0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-bridge0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-bridge0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-integration0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-integration0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-util0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-util0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-nimbus-jose-jwt0:9.37.3-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-nimbus-jose-jwt0:9.37.3-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-objectweb-asm0:9.6.0-1.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-objectweb-asm0:9.6.0-1.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-objectweb-asm-util0:9.6.0-1.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-objectweb-asm-util0:9.6.0-1.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-pem-keystore0:2.3.0-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-pem-keystore0:2.3.0-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-extensions0:2.0.1-3.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-extensions0:2.0.1-3.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-spring0:3.0.1-2.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-spring0:3.0.1-2.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-tracing-api0:2.0.1-3.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-tracing-api0:2.0.1-3.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-saaj-impl0:3.0.4-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-saaj-impl0:3.0.4-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-shibboleth-java-support0:8.0.0-6.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-shibboleth-java-support0:8.0.0-6.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-slf4j0:2.0.16-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-slf4j0:2.0.16-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-slf4j-api0:2.0.16-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-slf4j-api0:2.0.16-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-snakeyaml0:2.2.0-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-snakeyaml0:2.2.0-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly0:8.0.4-2.GA_redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly0:8.0.4-2.GA_redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk110:8.0.4-2.GA_redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk110:8.0.4-2.GA_redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk170:8.0.4-2.GA_redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk170:8.0.4-2.GA_redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk210:8.0.4-2.GA_redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk210:8.0.4-2.GA_redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-modules0:8.0.4-2.GA_redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-modules0:8.0.4-2.GA_redhat_00005.1.el8eap
Wolficeleborn-0.60.6.3-r7
Wolfidependency-track4.10.1-r3
Wolfidependency-track-bundled4.10.1-r3
Wolfidruid34.0.0-r6
Wolfidruid37.0.0-r56
Wolfidruid37.0.0-r14
Wolfisonarqube-1025.1.0.102122-r0
Wolfitez0.10.4-r6
Wolfithingsboard3.7-r2
Wolfithingsboard-tb-js-executor3.7-r2
Wolfithingsboard-tb-mqtt-transport3.7-r2
Wolfithingsboard-tb-node3.7-r2
Wolfithingsboard-tb-web-ui3.7-r2