Out of the kernel, into the tokens
blog.trailofbits.com | vulnerability | #linux | #jwt | #vulnerability-disclosure | #trail-of-bits | #dos | #jose | #kaslr
Summary
Trail of Bits details two disclosures: a 'billion hashes' DoS in JOSE libraries via attacker-controlled PBES2 iteration counts, and a KASLR bypass from privilege-less Linux containers.
- Published
- Collected
--- id: 1520 title: "Out of the kernel, into the tokens" source_domain: blog.trailofbits.com source_url: "https://blog.trailofbits.com/2024/03/08/out-of-the-kernel-into-the-tokens/" published_at: "2024-03-08T14:00:48Z" tags: ["linux", "jwt", "vulnerability-disclosure", "trail-of-bits", "dos", "jose", "kaslr"] phying_url: "https://phying.com/item/1520" lang: en --- # Out of the kernel, into the tokens ## Summary Trail of Bits details two disclosures: a 'billion hashes' DoS in JOSE libraries via attacker-controlled PBES2 iteration counts, and a KASLR bypass from privilege-less Linux containers. ## Intelligence Metadata - **Sources:** blog.trailofbits.com - **Published:** 2024-03-08T14:00:48Z - **Original:** https://blog.trailofbits.com/2024/03/08/out-of-the-kernel-into-the-tokens/ - **Phying News:** https://phying.com/item/1520