CVE-2024-29371

27

FAUCET Score

CVE-2024-29371 is a Denial-of-Service (DoS) vulnerability affecting jose4j versions prior to 0.9.6, including its use in products like IBM WebSphere. An unauthenticated attacker can exploit this by crafting a malicious JSON Web Encryption (JWE) token with a high compression ratio, leading to excessive memory allocation and processing during decompression. This vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity and a high impact on availability. While there is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered some community discussion, suggesting awareness.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 0.9.5CPE matchmatch criteria	cpe:2.3:a:jose4j_project:jose4j::::::::

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.25%

Probability of exploitation in next 30 days

EPSS Percentile

16.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0025 is in the 2nd percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (130)

mavenpatch availablevia ghsa

Product: org.bitbucket.b_c:jose4jFixed in: 0.9.6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-activemq-artemis-0:2.21.0-5.redhat_00052.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-angus-0:2.0.3-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-angus-activation-0:2.0.1-3.redhat_00006.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-commons-beanutils-0:1.9.4-13.redhat_00004.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-commons-cli-0:1.4.0-2.redhat_00003.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-commons-codec-0:1.15.0-6.redhat_00016.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-cxf-0:4.0.4-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-cxf-xjc-utils-0:4.0.0-5.redhat_00003.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-mime4j-0:0.8.11-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-sshd-0:2.12.1-2.redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-bouncycastle-0:1.78.1-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-byte-buddy-0:1.14.18-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-caffeine-0:3.1.8-2.redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-eap-product-conf-parent-0:800.3.0-2.GA_redhat_00004.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-guava-failureaccess-0:1.0.2-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-guava-libraries-0:33.0.0-1.jre_redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-hal-console-0:3.6.19-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-hornetq-0:2.4.9-4.Final_redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-httpcomponents-asyncclient-0:4.1.5-3.redhat_00005.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-httpcomponents-client-0:4.5.14-4.redhat_00012.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-httpcomponents-core-0:4.4.16-4.redhat_00010.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-infinispan-0:14.0.30-2.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jakarta-json-api-0:2.1.3-1.redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jakarta-mail-0:2.1.3-1.redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jakarta-servlet-api-0:6.0.0-5.redhat_00006.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jakarta-websocket-0:2.1.1-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jakarta-xml-bind-api-0:4.0.1-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jandex-0:3.0.8-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jasypt-0:1.9.3-4.redhat_00004.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-java-classmate-0:1.5.1-3.redhat_00004.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jaxb-0:4.0.5-2.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jboss-metadata-0:16.0.0-3.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jboss-openjdk-orb-0:10.1.0-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jbossws-cxf-0:7.1.0-1.Final_redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-joda-time-0:2.12.7-1.redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jsf-impl-0:4.0.7-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-mod_cluster-0:2.0.3-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-neethi-0:3.2.0-1.redhat_00004.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-netty-0:4.1.108-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-netty-transport-native-epoll-0:4.1.108-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-netty-xnio-transport-0:0.1.10-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-opensaml-0:4.2.0-4.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-parsson-0:1.1.5-2.redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-reactivex-rxjava-0:3.1.8-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-resteasy-0:6.2.7-2.Final_redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-slf4j-0:2.0.13-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-stax2-api-0:4.2.2-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-velocity-0:2.3.0-3.redhat_00009.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-weld-core-0:5.1.2-2.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-wildfly-0:8.0.3-9.GA_redhat_00004.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-wildfly-discovery-0:1.3.0-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-wildfly-elytron-0:2.2.6-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-wsdl4j-0:1.6.3-5.redhat_00008.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-wss4j-0:3.0.3-1.redhat_00008.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-xml-security-0:3.0.4-1.redhat_00005.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-yasson-0:3.0.3-3.redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-activemq-artemis-0:2.21.0-5.redhat_00052.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-angus-0:2.0.3-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-angus-activation-0:2.0.1-3.redhat_00006.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-commons-beanutils-0:1.9.4-13.redhat_00004.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-commons-cli-0:1.4.0-2.redhat_00003.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-commons-codec-0:1.15.0-6.redhat_00016.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-cxf-0:4.0.4-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-cxf-xjc-utils-0:4.0.0-5.redhat_00003.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-mime4j-0:0.8.11-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-sshd-0:2.12.1-2.redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-bouncycastle-0:1.78.1-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-byte-buddy-0:1.14.18-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-caffeine-0:3.1.8-2.redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-eap-product-conf-parent-0:800.3.0-2.GA_redhat_00004.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-guava-failureaccess-0:1.0.2-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-guava-libraries-0:33.0.0-1.jre_redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-hal-console-0:3.6.19-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-hornetq-0:2.4.9-4.Final_redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-httpcomponents-asyncclient-0:4.1.5-3.redhat_00005.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-httpcomponents-client-0:4.5.14-4.redhat_00012.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-httpcomponents-core-0:4.4.16-4.redhat_00010.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-infinispan-0:14.0.30-2.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jakarta-json-api-0:2.1.3-1.redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jakarta-mail-0:2.1.3-1.redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jakarta-servlet-api-0:6.0.0-5.redhat_00006.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jakarta-websocket-0:2.1.1-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jakarta-xml-bind-api-0:4.0.1-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jandex-0:3.0.8-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jasypt-0:1.9.3-4.redhat_00004.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-java-classmate-0:1.5.1-3.redhat_00004.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jaxb-0:4.0.5-2.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jboss-metadata-0:16.0.0-3.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jboss-openjdk-orb-0:10.1.0-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jbossws-cxf-0:7.1.0-1.Final_redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-joda-time-0:2.12.7-1.redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jsf-impl-0:4.0.7-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-mod_cluster-0:2.0.3-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-neethi-0:3.2.0-1.redhat_00004.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-netty-0:4.1.108-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-netty-xnio-transport-0:0.1.10-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-opensaml-0:4.2.0-4.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-parsson-0:1.1.5-2.redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-reactivex-rxjava-0:3.1.8-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-resteasy-0:6.2.7-2.Final_redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-slf4j-0:2.0.13-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-stax2-api-0:4.2.2-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-velocity-0:2.3.0-3.redhat_00009.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-weld-core-0:5.1.2-2.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-wildfly-0:8.0.3-9.GA_redhat_00004.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-wildfly-discovery-0:1.3.0-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-wildfly-elytron-0:2.2.6-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-wsdl4j-0:1.6.3-5.redhat_00008.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-wss4j-0:3.0.3-1.redhat_00008.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-xml-security-0:3.0.4-1.redhat_00005.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-yasson-0:3.0.3-3.redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.1.0

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-netty-transport-native-epoll-0:4.1.108-1.Final_redhat_00001.1.el9eap

redhatno patchvia redhat_api

Product: OpenShift Developer Tools and ServicesFixed in: jenkins-2-plugins

redhatno patchvia redhat_api

Product: OpenShift ServerlessFixed in: openshift-serverless-1/kn-ekb-dispatcher-rhel9

redhatno patchvia redhat_api

Product: OpenShift ServerlessFixed in: openshift-serverless-1/kn-ekb-receiver-rhel9

redhatno patchvia redhat_api

Product: Red Hat build of Apicurio Registry 2Fixed in: jose4j

redhatno patchvia redhat_api

Product: Red Hat build of Apicurio Registry 3Fixed in: jose4j

redhatno patchvia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8Fixed in: jose4j

redhatno patchvia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8Fixed in: org.bitbucket.b_c-jose4j

redhatno patchvia redhat_api

Product: streams for Apache Kafka 2Fixed in: jose4j

redhatno patchvia redhat_api

Product: streams for Apache Kafka 3Fixed in: jose4j

redhatend of lifevia redhat_api

Product: Red Hat Single Sign-On 7Fixed in: jose4j

redhatend of lifevia redhat_api

Product: Red Hat OpenShift Dev SpacesFixed in: devspaces-tech-preview/idea-rhel9

redhatend of lifevia redhat_api

Product: Red Hat build of Debezium 2Fixed in: jose4j

redhatend of lifevia redhat_api

Product: Red Hat build of Debezium 3Fixed in: jose4j

redhatend of lifevia redhat_api

Product: Red Hat Fuse 7Fixed in: jose4j

redhatend of lifevia redhat_api

Product: Red Hat Process Automation 7Fixed in: jose4j

Vendor Advisories (2)

mavenGHSA-3677-xxcr-wjqvhigh

jose4j is vulnerable to DoS via compressed JWE content

redhatCVE-2024-29371Important

jose4j: jose4j: Denial of Service via malicious JSON Web Encryption (JWE) token compression

References

bitbucket.org / b_c/jose4j/issues/220/vuln-zip-bomb-attack

ExploitIssue TrackingMitigation