CVE-2024-30171

2024-05-1415:21:52

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-30171

unix

security issue

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

Percentile

15.5%

JSON

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

OSVersionArchitecturePackageVersionFilename
Debian12allbouncycastle<= 1.72-2bouncycastle_1.72-2_all.deb
Debian11allbouncycastle<= 1.68-2bouncycastle_1.68-2_all.deb
Debian999allbouncycastle<= 1.77-1bouncycastle_1.77-1_all.deb
Debian13allbouncycastle<= 1.77-1bouncycastle_1.77-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	bouncycastle	<= 1.72-2	bouncycastle_1.72-2_all.deb
Debian	11	all	bouncycastle	<= 1.68-2	bouncycastle_1.68-2_all.deb
Debian	999	all	bouncycastle	<= 1.77-1	bouncycastle_1.77-1_all.deb
Debian	13	all	bouncycastle	<= 1.77-1	bouncycastle_1.77-1_all.deb