---
id: 1520
title: "Out of the kernel, into the tokens"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2024/03/08/out-of-the-kernel-into-the-tokens/"
published_at: "2024-03-08T14:00:48Z"
tags: ["linux", "jwt", "vulnerability-disclosure", "trail-of-bits", "dos", "jose", "kaslr"]
phying_url: "https://phying.com/item/1520"
lang: en
---

# Out of the kernel, into the tokens

## Summary

Trail of Bits details two disclosures: a 'billion hashes' DoS in JOSE libraries via attacker-controlled PBES2 iteration counts, and a KASLR bypass from privilege-less Linux containers.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2024-03-08T14:00:48Z
- **Original:** https://blog.trailofbits.com/2024/03/08/out-of-the-kernel-into-the-tokens/
- **Phying News:** https://phying.com/item/1520