title: Jwcrypto: denail of service  via specifically crafted jwe
description: A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service attack.
affected:
{
product: jwcrypto
vendor: n/a
defaultStatus: affected
}
{
vendor: Red Hat
product: Red Hat Ansible Automation Platform 2
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: automation-controller
defaultStatus: unaffected
cpes: cpe:/a:redhat:ansible_automation_platform:2
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: python-jwcrypto
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:7
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: idm:client/python-jwcrypto
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: idm:DL1/python-jwcrypto
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: python-jwcrypto
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
product: Fedora 38
vendor: Fedora
collectionURL: https://packages.fedoraproject.org/
packageName: python-jwcrypto
defaultStatus: unknown
}
{
product: Fedora 39
vendor: Fedora
collectionURL: https://packages.fedoraproject.org/
packageName: python-jwcrypto
defaultStatus: unknown
}
metrics:
other: [
content: {'value': 'Moderate', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]