CVE-2024-31209
OpenID Connect client Atom Exhaustion in provider configuration worker ets table location
Résumé
OpenID Connect client Atom Exhaustion in provider configuration worker ets table location
Description d'origine
La description telle que publiée par la source (souvent en anglais).
oidcc is the OpenID Connect client library for Erlang. Denial of Service (DoS) by Atom exhaustion is possible by calling oidcc_provider_configuration_worker:get_provider_configuration/1 or oidcc_provider_configuration_worker:get_jwks/1. This issue has been patched in version(s)3.1.2 & 3.2.0-beta.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- patch github.com
- web github.com