CVE-2024-31209

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-31209
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-31209.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-31209
Aliases
Published
2024-04-04T16:04:43.255Z
Modified
2026-07-15T01:49:16.973126952Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H CVSS Calculator
Summary
OpenID Connect client Atom Exhaustion in provider configuration worker ets table location
Details

oidcc is the OpenID Connect client library for Erlang. Denial of Service (DoS) by Atom exhaustion is possible by calling oidcc_provider_configuration_worker:get_provider_configuration/1 or oidcc_provider_configuration_worker:get_jwks/1. This issue has been patched in version(s)3.1.2 & 3.2.0-beta.3.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/31xxx/CVE-2024-31209.json",
    "cwe_ids": [
        "CWE-400"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/erlef/oidcc

Affected ranges

Type
GIT
Repo
https://github.com/erlef/oidcc
Events
Introduced
d14e5feb85515f397d344be44c58044c15b3318e
Introduced
6d28af86770dccde52b53659b16baa6783fefae9
Introduced
3a5da3c8d39770a20e5297dc71d22e8d049f918b
Fixed
2463579d1d76fa74e4086a7c1a45fd963eca2add
Fixed
feb21ec6c89bfad87208551b31e7da9be24eb6ef
Fixed
62e438f15c70c6687fd58bd175c0794bfd8a2db1
Fixed
2f304d877c7e0613d6fd952d7feacbf40dbc355c
Fixed
48171fb62688fb4eec1ead0884aa501e0aa68649
Fixed
ac458ed88dc292aad6fa7343f6a53e73c560fb1a
Database specific 
{
    "extracted_events": [
        {
            "introduced": "3.0.0"
        },
        {
            "fixed": "3.0.2"
        },
        {
            "introduced": "3.1.0"
        },
        {
            "fixed": "3.1.2"
        },
        {
            "introduced": "3.2.0-beta.1"
        },
        {
            "fixed": "3.2.0-beta.3"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v3.*
v3.0.0
v3.0.1
v3.1.0
v3.1.1
v3.2.0-beta.1
v3.2.0-beta.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-31209.json"