CVE-2017-12972

High

Published: 20/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Nimbus JOSE+JWT before version 4.39, there is no integer-overflow check when converting length values from bytes to bits. This allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext, resulting in different plaintext for the same HMAC.

Risk Assessment

The lack of proper safeguards can lead to serious security vulnerabilities, allowing attackers to manipulate data and gain access to sensitive information.

Recommendation

It is recommended to update Nimbus JOSE+JWT to version 4.39 or later to patch this vulnerability and implement additional data verification mechanisms.

Other vulnerabilities in Nimbus JOSE+JWT

CVE-2017-12974High
Nimbus JOSE+JWT before 4.36 does not verify that the public x and y coordinates of the EC key are on the specified curve, allowing attackers to conduct an Invalid Curve Attack.

Original NVD description (English source)

In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS