Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

2024-05-1415:32:54

CWE-203

GitHub Advisory Database

github.com

bouncy castle

rsa

timing-based leakage

java tls

jsse provider

6.7 Medium

AI Score

Confidence

Low

JSON

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

CPENameOperatorVersion
org.bouncycastle:bcpkix-jdk14lt1.78
org.bouncycastle:bcpkix-jdk15to18lt1.78
org.bouncycastle:bcpkix-jdk18onlt1.78
bouncycastle.cryptographylt2.3.1
bouncycastlelt2.3.1
org.bouncycastle:bctls-jdk15to18lt1.78
org.bouncycastle:bctls-jdk14lt1.78
org.bouncycastle:bctls-jdk18onlt1.78
org.bouncycastle:bcprov-jdk14lt1.78
org.bouncycastle:bcprov-jdk15to18lt1.78

Name	Operator	Version
org.bouncycastle:bcpkix-jdk14	lt	1.78
org.bouncycastle:bcpkix-jdk15to18	lt	1.78
org.bouncycastle:bcpkix-jdk18on	lt	1.78
bouncycastle.cryptography	lt	2.3.1
bouncycastle	lt	2.3.1
org.bouncycastle:bctls-jdk15to18	lt	1.78
org.bouncycastle:bctls-jdk14	lt	1.78
org.bouncycastle:bctls-jdk18on	lt	1.78
org.bouncycastle:bcprov-jdk14	lt	1.78
org.bouncycastle:bcprov-jdk15to18	lt	1.78