Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2025/04/13 3:36 p.m.•41 views

CVE-2025-31354

Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters...

5.3CVSS6.8AI score0.00137EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/11 4:15 p.m.•58 views

CVE-2025-31354

Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters...

5.3CVSS0.00137EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/08/08 5:23 p.m.•17 views

org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters...

7.5CVSS7.3AI score0.011EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2024/08/08 5:23 p.m.•14 views

org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters...

7.5CVSS7.3AI score0.011EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2024/06/19 3:52 a.m.•43 views

CVE-2024-29857

A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters...

6.5CVSS6.3AI score0.011EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2024/05/14 3:32 p.m.•89 views

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

6.7AI score0.011EPSS
SaveExploits1References9Affected Software10
OSV
OSV
•added 2024/05/14 3:17 p.m.•7 views

DEBIAN-CVE-2024-29857

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.6AI score0.011EPSS
SaveExploits1References1
OSV
OSV
•added 2024/05/14 3:17 p.m.•16 views

UBUNTU-CVE-2024-29857

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.8AI score0.011EPSS
SaveExploits1References5
GitLab Advisory Database
GitLab Advisory Database
•added 2024/05/14 12:00 a.m.•45 views

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

7.5CVSS6.2AI score0.011EPSS
SaveExploits1References9
CVE
CVE
•added 2024/05/09 4:17 a.m.•1102 views

CVE-2024-29857

A vulnerability exists in the ECCurve.java and ECCurve.cs files within the Bouncy Castle library (BC Java, BC Java LTS, BC-FJA, and BC C# .Net). The root cause is uncontrolled resource consumption when processing the F2m elliptical curve type ; specifically, importing an EC certificate with craft...

6.4AI score0.011EPSS
SaveExploits1References4
Veracode
Veracode
•added 2024/04/25 3:51 p.m.•54 views

Denial Of Service (DoS)

Bouncy Castle is vulnerable to Denial of Service DoS. The vulnerability is due to improper validation of F2m parameters, allowing an attacker to craft a certificate that causes high CPU usage during the evaluation of the curve parameters...

7.5CVSS6.2AI score0.011EPSS
SaveExploits1References6Affected Software7
Rows per page
Query Builder