Skip to content
Out of the kernel, into the tokens
blog.trailofbits.com | vulnerability | #linux | #jwt | #vulnerability-disclosure | #trail-of-bits | #dos | #jose | #kaslr
Summary
Trail of Bits details two disclosures: a 'billion hashes' DoS in JOSE libraries via attacker-controlled PBES2 iteration counts, and a KASLR bypass from privilege-less Linux containers.
- Published
- Collected