Lucene search
GoogleOSV:GHSA-8XFC-GM6G-VGPVHistoryMay 14, 2024 - 3:32 p.m.
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
2024-05-1415:32:54
Google
osv.dev
17
bouncy castle
certificate parsing
cpu usage
eccurve
software
security vulnerability
An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters.
References
github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63
github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857
github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281
github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857
nvd.nist.gov/vuln/detail/CVE-2024-29857
www.bouncycastle.org/latest_releases.html
Related
nvd
nvd
CVE-2024-29857
2024-05-14 15:17:02
cve
cve
CVE-2024-29857
2024-05-14 15:17:02
debiancve
debiancve
CVE-2024-29857
2024-05-14 15:17:02
cgr
cgr
CVE-2024-29857 vulnerabilities
2024-05-19 03:07:16
gitlab
gitlab
github
github
ubuntucve
ubuntucve
CVE-2024-29857
2024-05-14 00:00:00
redhatcve
redhatcve
CVE-2024-29857
2024-06-19 03:52:08
osv
osv
CGA-p93x-49fc-v5m3
2024-06-19 07:36:00
cvelist
cvelist
CVE-2024-29857
1976-01-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2024-04-25 15:51:36
wolfi
wolfi
CVE-2024-29857 vulnerabilities
2024-06-28 21:08:33
nessus
nessus
ibm
ibm