CVE-2023-37464

OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). The AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE. The spec says that a fixed length of 16 octets must be applied. Therefore this bug allows an attacker to provide a truncated Authentication Tag and to modify the JWE accordingly. Users should upgrade to a version >= 0.6.2.2. Users unable to upgrade should avoid using AES GCM encryption and replace it with another encryption algorithm (e.g. AES CBC).

• CWE-327

• https://datatracker.ietf.org/doc/html/rfc7518#section-4.7Third Party Advisory
• https://github.com/OpenIDC/cjose/commit/7325e9a5e71e2fc0e350487ecac7d84acdf0ed5ePatch
• https://github.com/OpenIDC/cjose/releases/tag/v0.6.2.2Release Notes
• https://github.com/OpenIDC/cjose/security/advisories/GHSA-3rhg-3gf2-6xgjExploit, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2023/08/msg00002.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFWAPMYYVBO2U65HPYDTBEKNSXG4TP5C/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LCQJXKDPCWCXB2V4JMQ3UWYJ4UIBPUW6/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTZHOVGY7AHGNMEY245HK4Q36AMA53AL/
• https://www.debian.org/security/2023/dsa-5472
• https://datatracker.ietf.org/doc/html/rfc7518#section-4.7Third Party Advisory
• https://github.com/OpenIDC/cjose/commit/7325e9a5e71e2fc0e350487ecac7d84acdf0ed5ePatch
• https://github.com/OpenIDC/cjose/releases/tag/v0.6.2.2Release Notes
• https://github.com/OpenIDC/cjose/security/advisories/GHSA-3rhg-3gf2-6xgjExploit, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2023/08/msg00002.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFWAPMYYVBO2U65HPYDTBEKNSXG4TP5C/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LCQJXKDPCWCXB2V4JMQ3UWYJ4UIBPUW6/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTZHOVGY7AHGNMEY245HK4Q36AMA53AL/
• https://www.debian.org/security/2023/dsa-5472

Published

Jul 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37459Contiki-NG is an operating system for internet-of-things dev…5.3
• CVE-2023-3746The ActivityPub WordPress plugin before 1.0.0 does not sanit…5.4
• CVE-2023-37460Plexis Archiver is a collection of Plexus components to crea…9.8
• CVE-2023-37461Metersphere is an opensource testing framework. Files upload…9.8
• CVE-2023-37462XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-37463cmark-gfm is an extended version of the C reference implemen…7.5
• CVE-2023-37466vm2 is an advanced vm/sandbox for Node.js. The library conta…10
• CVE-2023-37467Discourse is an open source discussion platform. Prior to ve…5.4
• CVE-2023-37468Feedbacksystem is a personalized feedback system for student…5.5
• CVE-2023-37469CasaOS is an open-source personal cloud system. Prior to ver…8.8
• CVE-2023-3747Zero Trust Administrators have the ability to disallow end u…5.5
• CVE-2023-37470Metabase is an open-source business intelligence and analyti…9.8