Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2024/05/14 3:32 p.m.31 views

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS6.7AI score0.00139EPSS
Exploits0References9Affected Software10
OSV
OSV
added 2024/05/14 3:21 p.m.21 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

6.6AI score
Exploits0References4
NVD
NVD
added 2024/05/14 3:21 p.m.21 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS7.5AI score0.00139EPSS
Exploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2024/05/14 12:0 a.m.31 views

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS6.3AI score0.00139EPSS
Exploits0References8
GitLab Advisory Database
GitLab Advisory Database
added 2024/05/14 12:0 a.m.25 views

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS6.3AI score0.00139EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2024/05/09 12:0 a.m.38 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

7.2AI score0.00139EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/05/09 12:0 a.m.37 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

6.6AI score0.00139EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/07 12:0 a.m.2 views

PT-2024-23223

Name of the Vulnerable Software and Affected Versions Bouncy Castle Java TLS API and JSSE Provider versions prior to 1.78 Description An issue may cause timing-based leakage in RSA based handshakes due to exception processing. Recommendations For versions prior to 1.78, update to version 1.78 or...

7.5CVSS6.6AI score0.00326EPSS
Exploits0References36
Rows per page
Query Builder