CVE-2017-12974

High

Published: 20/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Nimbus JOSE+JWT before 4.36 does not verify that the public x and y coordinates of the EC key are on the specified curve, allowing attackers to conduct an Invalid Curve Attack.

Risk Assessment

The lack of curve validation may lead to serious security vulnerabilities, allowing attacks on systems relying on this library.

Recommendation

It is recommended to update Nimbus JOSE+JWT to version 4.36 or later to ensure proper curve validation.

Other vulnerabilities in Nimbus JOSE+JWT

CVE-2017-12972High
In Nimbus JOSE+JWT before version 4.39, there is no integer-overflow check when converting length values from bytes to bits. This allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext, resulting in different plaintext for the same HMAC.

Original NVD description (English source)

Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable curve validation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS