PT-2022-23172 · Jose · Jose

Panva + 1 · Published 2022-09-07 · Updated 2023-07-21 · CVE-2022-36083

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions JOSE versions prior to v1.28.2 JOSE versions prior to v2.0.6 JOSE versions prior to v3.20.4 JOSE versions prior to v4.9.2

Description The PBKDF2-based JWE key management algorithms in JOSE expect a JOSE Header Parameter named p2c (PBES2 Count), which determines the number of PBKDF2 iterations to derive a CEK wrapping key. This parameter intentionally slows down the key derivation function to make password brute-force and dictionary attacks more expensive. However, this makes the PBES2 algorithms unsuitable for situations where the JWE comes from an untrusted source, as an adversary can pick an extremely high PBES2 Count value, initiating a CPU-bound computation that may take an unreasonable amount of time to finish. The impact is limited to users utilizing the JWE decryption APIs with symmetric secrets to decrypt JWEs from untrusted parties who do not limit the accepted JWE Key Management Algorithms.

Recommendations For versions prior to v1.28.2, update to v1.28.2 or later to limit the maximum PBKDF2 iteration count to 10000 by default. For versions prior to v2.0.6, update to v2.0.6 or later to limit the maximum PBKDF2 iteration count to 10000 by default. For versions prior to v3.20.4, update to v3.20.4 or later to limit the maximum PBKDF2 iteration count to 10000 by default. For versions prior to v4.9.2, update to v4.9.2 or later to limit the maximum PBKDF2 iteration count to 10000 by default. As a temporary workaround, consider using the keyManagementAlgorithms decryption option to disable accepting PBKDF2 altogether, or inspect the JOSE Header prior to using the decryption API and limit the PBKDF2 iteration count (p2c Header Parameter).

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-834

Related Identifiers

CVE-2022-36083

GHSA-JV3G-J58F-9MQ9

Affected Products

Jose

References · 15

• 🔥 https://github.com/panva/jose/security/advisories/GHSA-jv3g-j58f-9mq9 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/36xxx/CVE-2022-36083.json · Exploit
• https://github.com/panva/jose/commit/03d6d013bf6e070e85adfe5731f526978e3e8e4d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-36083 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-36083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-36083 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jv3g-j58f-9mq9 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-36083 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-36083 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-36083 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36083 · Vendor Advisory
• https://github.com/panva/jose · Note
• https://github.com/panva/jose/releases/tag/v4.9.2 · Note
• https://t.me/cibsecurity/49413 · Telegram Post
• https://t.me/cvenotify/35836 · Telegram Post