Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/04/13 3:36 p.m.11 views

CVE-2025-31354

Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters...

5.3CVSS6.8AI score0.0017EPSS
Exploits0References1
NVD
NVD
added 2025/04/11 4:15 p.m.5 views

CVE-2025-31354

Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters...

5.3CVSS0.0017EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/08/08 5:23 p.m.1 views

org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters...

7.5CVSS7.3AI score0.00252EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/08/08 5:23 p.m.2 views

org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters...

7.5CVSS7.3AI score0.00252EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2024/06/19 3:52 a.m.26 views

CVE-2024-29857

A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters...

6.5CVSS6.3AI score0.00252EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2024/05/14 3:32 p.m.71 views

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.7AI score0.00252EPSS
Exploits0References9Affected Software10
OSV
OSV
added 2024/05/14 3:17 p.m.2 views

DEBIAN-CVE-2024-29857

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.6AI score0.00252EPSS
Exploits0References1
OSV
OSV
added 2024/05/14 3:17 p.m.0 views

UBUNTU-CVE-2024-29857

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.8AI score0.00252EPSS
Exploits0References5
GitLab Advisory Database
GitLab Advisory Database
added 2024/05/14 12:0 a.m.24 views

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.2AI score0.00252EPSS
Exploits0References9
CVE
CVE
added 2024/05/09 4:17 a.m.1027 views

CVE-2024-29857

CVE-2024-29857 (open vulnerability in Bouncy Castle family). An issue in ECCurve.java/ECCurve.cs can allow an EC certificate with crafted F2m parameters to trigger excessive CPU usage while evaluating curve parameters. Affected products/versions include BC Java before 1.78, BC Java LTS before 2.7...

7.5CVSS6.4AI score0.00252EPSS
Exploits0References4
Veracode
Veracode
added 2024/04/25 3:51 p.m.35 views

Denial Of Service (DoS)

Bouncy Castle is vulnerable to Denial of Service DoS. The vulnerability is due to improper validation of F2m parameters, allowing an attacker to craft a certificate that causes high CPU usage during the evaluation of the curve parameters...

7.5CVSS6.2AI score0.00252EPSS
Exploits0References6Affected Software7
Rows per page
Query Builder