CVE-2024-29857

2024-06-1903:52:08

redhat.com

access.redhat.com

bouncy castle java

c# .net

ec certificate

cpu consumption

evaluation

f2m parameters

6.3 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java). Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters.