CVE-2023-6681

Published: Feb 12, 2024Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service attack.

Affected (8)

Products: Latchset: Jwcrypto · Fedoraproject: Fedora · Redhat: Enterprise Linux, Enterprise Linux For Arm 64, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Power Little Endian

1 product

1 product

4 products

Enterprise Linux For Arm 64

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Power Little Endian

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Latchset Jwcrypto	Before 1.5.1

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 38
Fedoraproject Fedora	Version 39
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0
Redhat Enterprise Linux For Arm 64	Version 8.0
Redhat Enterprise Linux For Ibm Z Systems	Version 8.0
Redhat Enterprise Linux For Power Little Endian	Version 8.0