Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2024-29857HistoryMay 14, 2024 - 3:17 p.m.
CVE-2024-29857
2024-05-1415:17:02
Debian Security Bug Tracker
security-tracker.debian.org
12
issue
discovered
bouncy castle
java cryptography
unix
An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | bouncycastle | <= 1.72-2 | bouncycastle_1.72-2_all.deb |
| Debian | 11 | all | bouncycastle | <= 1.68-2 | bouncycastle_1.68-2_all.deb |
| Debian | 10 | all | bouncycastle | <= 1.60-1 | bouncycastle_1.60-1_all.deb |
| Debian | 999 | all | bouncycastle | <= 1.77-1 | bouncycastle_1.77-1_all.deb |
| Debian | 13 | all | bouncycastle | <= 1.77-1 | bouncycastle_1.77-1_all.deb |
Related
nvd
nvd
CVE-2024-29857
2024-05-14 15:17:02
cve
cve
CVE-2024-29857
2024-05-14 15:17:02
redhatcve
redhatcve
CVE-2024-29857
2024-06-19 03:52:08
gitlab
gitlab
osv
osv
CGA-p93x-49fc-v5m3
2024-06-19 07:36:00
cvelist
cvelist
CVE-2024-29857
1976-01-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2024-04-25 15:51:36
wolfi
wolfi
CVE-2024-29857 vulnerabilities
2024-06-28 21:08:33
cgr
cgr
CVE-2024-29857 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2024-29857
2024-05-14 00:00:00
github
github
nessus
nessus
ibm
ibm