GitHub Advisoryadvisory · Maven
GHSA-2qp9-wg27-9pcv Nimbus JOSE+JWT missing overflow check
HIGH
Official page ↗
- Aliases
- CVE-2017-12972
- Ecosystem
- Maven
- Packages
- com.nimbusds:nimbus-jose-jwt
- Severity
- High
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-345
- Reviewed
- 2022-11-08
Affected packages
• Maven com.nimbusds:nimbus-jose-jwt: < 4.39 → fixed in 4.39
Description
In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC.
Related
Alias · CVE (1)
- CVE-2017-12972 In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers… vulnerability
Weakness · CWE (1)
- CWE-345 Insufficient Verification of Data Authenticity weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-12972 advisory
- https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/0d2bd649ea386539220d4facfe1f65eb1dadb86c web
- https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/224/byte-to-bit-overflow-in-cbc web
- https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt web
- https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E web