CVE-2024-30172

2024-05-1415:21:53

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-30172

bouncy castle

java cryptography

AI Score

7.2

Confidence

Low

EPSS

Percentile

9.0%

JSON

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.

OSVersionArchitecturePackageVersionFilename
Debian12allbouncycastle<= 1.72-2bouncycastle_1.72-2_all.deb
Debian11allbouncycastle<= 1.68-2bouncycastle_1.68-2_all.deb
Debian999allbouncycastle<= 1.77-1bouncycastle_1.77-1_all.deb
Debian13allbouncycastle<= 1.77-1bouncycastle_1.77-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	bouncycastle	<= 1.72-2	bouncycastle_1.72-2_all.deb
Debian	11	all	bouncycastle	<= 1.68-2	bouncycastle_1.68-2_all.deb
Debian	999	all	bouncycastle	<= 1.77-1	bouncycastle_1.77-1_all.deb
Debian	13	all	bouncycastle	<= 1.77-1	bouncycastle_1.77-1_all.deb