CVE-2023-50967

Aliases:DEBIAN-CVE-2023-50967
Advisory lineage Upstream: 0 Downstream: 4
Modified
Published: 20 Mar 2024, 00:00
Last modified:04 Nov 2025, 22:05

Vulnerability Summary

Overall Risk (default)
medium
40/100
CVSS Score
7.5 HIGH
v3.1 (cve.org)
EPSS Score
1.38% LOW
1% probability +0.60%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

20 Mar 2024, 00:00
Published
Vulnerability first disclosed
04 Nov 2025, 22:05
Last Modified
Vulnerability information updated

Description

latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

CVSS Metrics

  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 1.38%• Percentile: 71%

Techniques & Countermeasures

  • CWE-400•Uncontrolled Resource Consumption

    The product does not properly control the allocation and maintenance of a limited resource.

Affected Systems

  • debian•jose

    < 10-3+deb11u1 | < 11-2+deb12u1 | < 13-1 | < 13-1

  • fedoraproject•fedora

    38 | 39 | 40

  • latchset•jose

    ≤ 11

References (9)