oidcc is the OpenID Connect client library for Erlang. Denial of Service (DoS) by Atom exhaustion is possible by calling `oidcc_provider_configuration_worker:get_provider_configuration/1` or `oidcc_provider_configuration_worker:get_jwks/1`. This issue has been patched in version(s)`3.1.2` & `3.2.0-beta.3`.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2024-04-04T16:04:43.255Z
Updated: 2024-09-03T18:26:21.909Z
Reserved: 2024-03-29T14:16:31.900Z
Link: CVE-2024-31209
Vulnrichment
Updated: 2024-08-02T01:46:04.592Z
NVD
Status : Awaiting Analysis
Published: 2024-04-04T16:15:09.550
Modified: 2024-04-04T16:33:06.610
Link: CVE-2024-31209
Redhat
No data.