VDB
RHSA-2025%3A7669
RHSA-2025%3A7669
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in GO-JOSE. In affected versions, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code uses strings.Split(token, ".") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. This issue could be exploied by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-console-rhel9@sha256:66a880e54cea05b64ff3547a22dec4d34f2793388db8e7c3798f999fd3ad904b_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-console-rhel9@sha256:66a880e54cea05b64ff3547a22dec4d34f2793388db8e7c3798f999fd3ad904b_ppc64le, openshift4/ose-console-rhel9@sha256:66a880e54cea05b64ff3547a22dec4d34f2793388db8e7c3798f999fd3ad904b_ppc64le |
| Red Hat | openshift4/ose-docker-builder-rhel9@sha256:6bc6d24af832c02ee0b795a8e66877f112d88b08d0fd2a90c9737e24ea8be4fd_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-docker-builder-rhel9@sha256:6bc6d24af832c02ee0b795a8e66877f112d88b08d0fd2a90c9737e24ea8be4fd_s390x, openshift4/ose-docker-builder-rhel9@sha256:6bc6d24af832c02ee0b795a8e66877f112d88b08d0fd2a90c9737e24ea8be4fd_s390x |
| Red Hat | openshift4/ose-console-rhel9@sha256:f85e8ed84931f3de99c6aea8d2263c1a3fc7b76462799bdf2472b4b30eeb0af1_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | openshift4/network-tools-rhel9@sha256:ad2ac98cfb376c572a63961dd2731cbc4a537271b1d4036d20f10af78fa467df_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/network-tools-rhel9@sha256:ad2ac98cfb376c572a63961dd2731cbc4a537271b1d4036d20f10af78fa467df_arm64, openshift4/network-tools-rhel9@sha256:ad2ac98cfb376c572a63961dd2731cbc4a537271b1d4036d20f10af78fa467df_arm64, openshift4/network-tools-rhel9@sha256:ad2ac98cfb376c572a63961dd2731cbc4a537271b1d4036d20f10af78fa467df_arm64 |
| Red Hat | openshift4/ose-operator-registry-rhel9@sha256:897fdbad4c1de1fdd78ec90154c212985185bc5131d2520e79579f5d81243210_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-operator-registry-rhel9@sha256:897fdbad4c1de1fdd78ec90154c212985185bc5131d2520e79579f5d81243210_s390x, openshift4/ose-operator-registry-rhel9@sha256:897fdbad4c1de1fdd78ec90154c212985185bc5131d2520e79579f5d81243210_s390x |
| Red Hat | openshift4/ose-docker-builder-rhel9@sha256:30c9abc58256b4717f41c5f9b14a3e0c7a367fed21253ad38037484458d1ddd8_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-docker-builder-rhel9@sha256:30c9abc58256b4717f41c5f9b14a3e0c7a367fed21253ad38037484458d1ddd8_arm64, openshift4/ose-docker-builder-rhel9@sha256:30c9abc58256b4717f41c5f9b14a3e0c7a367fed21253ad38037484458d1ddd8_arm64 |
| Red Hat | openshift4/openshift-route-controller-manager-rhel9@sha256:af3a9ea90b49eaf8eb1099788fc4a96cfa8eda31800cd9e38ad5c0a6e8bc4cf1_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/openshift-route-controller-manager-rhel9@sha256:af3a9ea90b49eaf8eb1099788fc4a96cfa8eda31800cd9e38ad5c0a6e8bc4cf1_ppc64le, * |
| Red Hat | openshift4/ose-docker-builder-rhel9@sha256:30c9abc58256b4717f41c5f9b14a3e0c7a367fed21253ad38037484458d1ddd8_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-docker-builder-rhel9@sha256:30c9abc58256b4717f41c5f9b14a3e0c7a367fed21253ad38037484458d1ddd8_arm64, openshift4/ose-docker-builder-rhel9@sha256:30c9abc58256b4717f41c5f9b14a3e0c7a367fed21253ad38037484458d1ddd8_arm64, * |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:1aace716191bf852f1ebbd4e136cba55b3be8d196144c4c85671a7a35d991ce8_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:1aace716191bf852f1ebbd4e136cba55b3be8d196144c4c85671a7a35d991ce8_s390x, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:1aace716191bf852f1ebbd4e136cba55b3be8d196144c4c85671a7a35d991ce8_s390x |
| Red Hat | openshift4/ose-operator-registry-rhel9@sha256:897fdbad4c1de1fdd78ec90154c212985185bc5131d2520e79579f5d81243210_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-operator-registry-rhel9@sha256:897fdbad4c1de1fdd78ec90154c212985185bc5131d2520e79579f5d81243210_s390x, openshift4/ose-operator-registry-rhel9@sha256:897fdbad4c1de1fdd78ec90154c212985185bc5131d2520e79579f5d81243210_s390x, * |
| Red Hat | openshift4/ose-tests-rhel9@sha256:541512a7ab084b732af9ad464e27c9666326fe727aa21fc407d8ef03fece162b_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-tests-rhel9@sha256:541512a7ab084b732af9ad464e27c9666326fe727aa21fc407d8ef03fece162b_amd64, openshift4/ose-tests-rhel9@sha256:541512a7ab084b732af9ad464e27c9666326fe727aa21fc407d8ef03fece162b_amd64 |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:b3e2968bee18c7e2a93970ef8cef3a63d7e071abec1275c2caeba77e628fc9fa_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:b3e2968bee18c7e2a93970ef8cef3a63d7e071abec1275c2caeba77e628fc9fa_amd64, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:b3e2968bee18c7e2a93970ef8cef3a63d7e071abec1275c2caeba77e628fc9fa_amd64, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:b3e2968bee18c7e2a93970ef8cef3a63d7e071abec1275c2caeba77e628fc9fa_amd64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:24f68672aba38c21c0c045b40cd2021c43e221c0b94f997e8b9fce905695daf3_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-ovn-kubernetes-rhel9@sha256:24f68672aba38c21c0c045b40cd2021c43e221c0b94f997e8b9fce905695daf3_amd64 |
| Red Hat | openshift4/ose-tests-rhel9@sha256:188b14c3b5a38b2fbcee99de4518a73a96d6f794c0adb3c24b53a4569bbe8e4d_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-tests-rhel9@sha256:188b14c3b5a38b2fbcee99de4518a73a96d6f794c0adb3c24b53a4569bbe8e4d_ppc64le, *, openshift4/ose-tests-rhel9@sha256:188b14c3b5a38b2fbcee99de4518a73a96d6f794c0adb3c24b53a4569bbe8e4d_ppc64le |
| Red Hat | openshift4/ose-monitoring-plugin-rhel9@sha256:a3c563b7118c1c609140bc36e3a61627c6644eb1a2f220f100106d04427b90a3_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-monitoring-plugin-rhel9@sha256:a3c563b7118c1c609140bc36e3a61627c6644eb1a2f220f100106d04427b90a3_amd64 |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:b38995325736ab165a6ce349187a043e4bd65440ac8d2f6a71d750a1a8dbf6e4_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:b38995325736ab165a6ce349187a043e4bd65440ac8d2f6a71d750a1a8dbf6e4_arm64, openshift4/ose-agent-installer-node-agent-rhel9@sha256:b38995325736ab165a6ce349187a043e4bd65440ac8d2f6a71d750a1a8dbf6e4_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:3c9cee1368b0f1678fbdff36e3bbe0521287641529005ad4eed784ef98261cbe_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-ovn-kubernetes-rhel9@sha256:3c9cee1368b0f1678fbdff36e3bbe0521287641529005ad4eed784ef98261cbe_ppc64le, openshift4/ose-ovn-kubernetes-rhel9@sha256:3c9cee1368b0f1678fbdff36e3bbe0521287641529005ad4eed784ef98261cbe_ppc64le |
| Red Hat | openshift4/ose-ironic-agent-rhel9@sha256:4ed09bbae03a37c61f8f7ca45d30c126f9cbc92ef78f9c4ec74eda4090b97d88_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-ironic-agent-rhel9@sha256:4ed09bbae03a37c61f8f7ca45d30c126f9cbc92ef78f9c4ec74eda4090b97d88_amd64 |
| Red Hat | openshift4/ose-networking-console-plugin-rhel9@sha256:53a62ea827540794cfe57f691481d636468eebd1a96c0953ed7af7a2bbd8eba1_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-networking-console-plugin-rhel9@sha256:53a62ea827540794cfe57f691481d636468eebd1a96c0953ed7af7a2bbd8eba1_ppc64le, openshift4/ose-networking-console-plugin-rhel9@sha256:53a62ea827540794cfe57f691481d636468eebd1a96c0953ed7af7a2bbd8eba1_ppc64le, * |
| Red Hat | openshift4/ose-console-rhel9@sha256:f85e8ed84931f3de99c6aea8d2263c1a3fc7b76462799bdf2472b4b30eeb0af1_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-console-rhel9@sha256:f85e8ed84931f3de99c6aea8d2263c1a3fc7b76462799bdf2472b4b30eeb0af1_arm64 |
…and 158 more
Timeline
- May 21, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 11, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:7669 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2347423 issue
- https://issues.redhat.com/browse/OCPBUGS-55511 advisory
- https://issues.redhat.com/browse/OCPBUGS-55728 advisory
- https://issues.redhat.com/browse/OCPBUGS-55729 advisory
- https://issues.redhat.com/browse/OCPBUGS-55894 advisory
- https://issues.redhat.com/browse/OCPBUGS-55943 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7669.json advisory
- https://access.redhat.com/security/cve/CVE-2025-27144 advisory
- https://www.cve.org/CVERecord?id=CVE-2025-27144 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-27144 advisory
- https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22 advisory
- https://github.com/go-jose/go-jose/releases/tag/v4.0.5 advisory
- https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78 advisory