Lucene search

[email protected]NVD:CVE-2024-30171

HistoryMay 14, 2024 - 3:21 p.m.

CVE-2024-30171

2024-05-1415:21:52

[email protected]

web.nvd.nist.gov

bouncy castle

java tls

jsse provider

timing-based leakage

rsa handshakes

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

References

github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171

github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171

security.netapp.com/advisory/ntap-20240614-0008/

www.bouncycastle.org/latest_releases.html