Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2024/05/14 3:32 p.m.31 views

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS6.7AI score0.00901EPSS
Exploits0References9Affected Software10
NVD
NVD
added 2024/05/14 3:21 p.m.22 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS7.5AI score0.00901EPSS
Exploits0References4
OSV
OSV
added 2024/05/14 3:21 p.m.22 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

6.6AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/05/09 12:0 a.m.38 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

7.2AI score0.00901EPSS
Exploits0References4
CVE
CVE
added 2024/05/09 12:0 a.m.1347 views

CVE-2024-30171

CVE-2024-30171 : Affects the Bouncy Castle Java TLS API and JSSE Provider before 1.78. The issue is a timing-based leakage in RSA-based handshakes caused by exception processing. There is no exploit detail provided in the documents. Remediation: upgrade to a version containing the fix (BC 1.78 or...

5.9CVSS6.4AI score0.00901EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/05/09 12:0 a.m.39 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

6.6AI score0.00901EPSS
Exploits0References4
Rows per page
Query Builder