Lucene search
+L

1666 matches found

Github Security Blog
Github Security Blog
added 2024/05/14 3:32 p.m.40 views

Bouncy Castle crafted signature and public key can be used to trigger an infinite loop

An issue was discovered in Bouncy Castle Java Cryptography APIs starting in 1.73 and before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key...

7.5CVSS7.5AI score0.00753EPSS
SaveExploits1References9Affected Software8
OSV
OSV
added 2024/05/14 3:32 p.m.42 views

GHSA-8XFC-GM6G-VGPV Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

5.3CVSS6.9AI score0.011EPSS
SaveExploits1References8
OSV
OSV
added 2024/05/14 3:32 p.m.18 views

GHSA-M44J-CFRM-G8QC Bouncy Castle crafted signature and public key can be used to trigger an infinite loop

An issue was discovered in Bouncy Castle Java Cryptography APIs starting in 1.73 and before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key...

6.9CVSS6.9AI score0.00753EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2024/05/14 3:32 p.m.81 views

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.7AI score0.011EPSS
SaveExploits1References9Affected Software10
OSV
OSV
added 2024/05/14 3:21 p.m.6 views

DEBIAN-CVE-2024-30172

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key...

7.5CVSS6.6AI score0.00753EPSS
SaveExploits1References1
NVD
NVD
added 2024/05/14 3:21 p.m.39 views

CVE-2024-30172

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key...

7.5CVSS7.5AI score0.00753EPSS
SaveExploits1References2
OSV
OSV
added 2024/05/14 3:21 p.m.27 views

CVE-2024-30172

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key...

6.7AI score
SaveExploits0References2
NVD
NVD
added 2024/05/14 3:21 p.m.40 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS7.5AI score0.00901EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/14 3:21 p.m.5 views

DEBIAN-CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS6.3AI score0.00901EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/14 3:21 p.m.26 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

6.6AI score
SaveExploits0References4
OSV
OSV
added 2024/05/14 3:21 p.m.10 views

UBUNTU-CVE-2024-30172

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key...

7.5CVSS6.8AI score0.00753EPSS
SaveExploits1References6
OSV
OSV
added 2024/05/14 3:21 p.m.21 views

UBUNTU-CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS6.8AI score0.00901EPSS
SaveExploits1References4
NVD
NVD
added 2024/05/14 3:17 p.m.45 views

CVE-2024-29857

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS7.4AI score0.011EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/14 3:17 p.m.31 views

CVE-2024-29857

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

6.5AI score
SaveExploits0References4
OSV
OSV
added 2024/05/14 3:17 p.m.5 views

DEBIAN-CVE-2024-29857

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.6AI score0.011EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/14 3:17 p.m.13 views

UBUNTU-CVE-2024-29857

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.8AI score0.011EPSS
SaveExploits1References5
GitLab Advisory Database
GitLab Advisory Database
added 2024/05/14 12:00 a.m.26 views

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.2AI score0.011EPSS
SaveExploits1References9
GitLab Advisory Database
GitLab Advisory Database
added 2024/05/14 12:00 a.m.43 views

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.2AI score0.011EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.1 views

Bouncy Castle 安全漏洞

Bouncy Castle is a collection of APIs used in cryptography organized by Bouncy Castle. It includes APIs for the Java and C programming languages . A security vulnerability exists in Bouncy Castle versions prior to 1.78, which stems from a carefully crafted f2m parameter that may cause excessive C...

7.5CVSS6.6AI score0.011EPSS
SaveExploits1References8
GitLab Advisory Database
GitLab Advisory Database
added 2024/05/14 12:00 a.m.33 views

Bouncy Castle crafted signature and public key can be used to trigger an infinite loop

An issue was discovered in Bouncy Castle Java Cryptography APIs starting in 1.73 and before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key...

7.5CVSS7.5AI score0.00753EPSS
SaveExploits1References9
Rows per page
Query Builder