CVE-2023-6681
MEDIUM EPSS 54.7%
Published Feb 12, 20242y ago · Modified Jun 17, 20262w ago
5.3 CVSS 3.1
Published Feb 12, 2024 2y ago
Last Modified Jun 17, 2026 2w ago
Description
A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service attack.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability Low
Threat Intelligence
EPSS Exploit Probability
54.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-400 Uncontrolled Resource Consumption Resource Mgmt
Affected Products 8
| Vendor | Product | Version | Range |
|---|---|---|---|
| latchset | jwcrypto | * | <1.5.1 |
| fedoraproject | fedora | 38 | any |
| fedoraproject | fedora | 39 | any |
| redhat | enterprise_linux | 8.0 | any |
| redhat | enterprise_linux | 9.0 | any |
| redhat | enterprise_linux_for_arm_64 | 8.0 | any |
| redhat | enterprise_linux_for_ibm_z_systems | 8.0 | any |
| redhat | enterprise_linux_for_power_little_endian | 8.0 | any |
References 4
- access.redhat.com https://access.redhat.com/errata/RHSA-2024:3267
- access.redhat.com https://access.redhat.com/errata/RHSA-2024:9281
- access.redhat.com https://access.redhat.com/security/cve/CVE-2023-6681
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2260843
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.