Lucene search

MitreCVELIST:CVE-2024-30171

HistoryMay 09, 2024 - 12:00 a.m.

CVE-2024-30171

2024-05-0900:00:00

mitre

www.cve.org

bouncy castle

java tls

rsa handshake

timing-based leakage

cve-2024-30171

jsse provider

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

References

github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171

github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171

security.netapp.com/advisory/ntap-20240614-0008/

www.bouncycastle.org/latest_releases.html