PT-2023-25978 · Unknown+7 · Openidc/Cjose+7

Zandbelt · Published 2023-07-14 · Updated 2023-12-18 · CVE-2023-37464

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenIDC/cjose versions prior to 0.6.2.2

Description The AES GCM decryption routine in OpenIDC/cjose incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE, instead of the fixed length of 16 octets specified in the spec. This allows an attacker to provide a truncated Authentication Tag and modify the JWE accordingly.

Recommendations For versions prior to 0.6.2.2, upgrade to a version >= 0.6.2.2. For users unable to upgrade, avoid using AES GCM encryption and replace it with another encryption algorithm, such as AES CBC.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

ALSA-2023:4411

ALSA-2023:4418

AZL-27659

AZL-36936

CESA-2023_4418

CVE-2023-37464

DLA-3515-1

DSA-5472-1

GHSA-3RHG-3GF2-6XGJ

MGASA-2023-0350

OESA-2023-1441

OPENSUSE-SU-2023_3230-1

OPENSUSE-SU-2024:13052-1

RHSA-2023:4408

RHSA-2023:4409

RHSA-2023:4410

RHSA-2023:4411

RHSA-2023:4417

RHSA-2023:4418

RHSA-2023:4429

RHSA-2023_4411

RHSA-2023_4418

RLSA-2023:4418

SUSE-SU-2023:3030-1

SUSE-SU-2023:3230-1

SUSE-SU-2023_3030-1

SUSE-SU-2023_3230-1

USN-6307-1

Affected Products

Almalinux

Centos

Linuxmint

Openidc/Cjose

Red Hat

Rocky Linux

Suse

Ubuntu

References · 49

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37464.json · Exploit
• 🔥 https://github.com/OpenIDC/cjose/security/advisories/GHSA-3rhg-3gf2-6xgj · Exploit
• https://github.com/OpenIDC/cjose/commit/7325e9a5e71e2fc0e350487ecac7d84acdf0ed5e · Patch
• https://errata.rockylinux.org/RLSA-2023:4418 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6307-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1441 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-37464 · Security Note
• https://errata.almalinux.org/8/ALSA-2023-4418.html · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5472-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-4411.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/LCQJXKDPCWCXB2V4JMQ3UWYJ4UIBPUW6 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0350 · Vendor Advisory
• https://debian.org/security/2023/dsa-5472 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-27659 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-37464 · Vendor Advisory