CVE-2021-29443 — Observable Discrepancy in Jose

CWE-203 — Observable DiscrepancyCWE-696 — Incorrect Behavior Order5 documents4 sources
Severity
5.9MEDIUMNVD
OSV2.3
EPSS
0.3%
top 45.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Panva JoseJose Project JoseQemu
Timeline
PublishedApr 16
Latest updateJul 15

Description

jose is an npm library providing a number of cryptographic operations. In vulnerable versions AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed `JWEDecryptionFailed` would be thrown. A possibly observable difference in timing when padding error would occur while decrypting the ciphertext makes a padding oracle and an adversary might be able to make use of that oracle to decrypt…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5panva/jose< 1.28.1+2
▶NVDjose_project/jose1.0.0 — 1.28.1+2
▶npmjose_project/jose1.0.0 — 1.28.1+2
▶Ubuntuqemu/qemu< 1:2.11+dfsg-1ubuntu7.37+1

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
OSV
qemu vulnerabilities↗2021-07-15
▶
OSV
Padding Oracle Attack due to Observable Timing Discrepancy in jose↗2021-04-19
▶
GHSA
Padding Oracle Attack due to Observable Timing Discrepancy in jose↗2021-04-19
▶
CVEList
Padding Oracle Attack due to Observable Timing Discrepancy in jose↗2021-04-16
▶
CVE-2021-29443 — Observable Discrepancy in Panva Jose | cvebase