Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2024/05/14 3:32 p.m.•52 views

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS6.5AI score0.00901EPSS
SaveExploits1References9Affected Software10
osv_cve
osv_cve
•added 2024/05/14 3:21 p.m.•36 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

6.6AI score
SaveExploits0References4
NVD
NVD
•added 2024/05/14 3:21 p.m.•47 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS7.5AI score0.00901EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•11 views

CVE-2024-30171: Observable Discrepancy

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS6.5AI score0.00901EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/09 12:00 a.m.•68 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

6.6AI score0.00901EPSS
SaveExploits1References4
CVE
CVE
•added 2024/05/09 12:00 a.m.•1432 views

CVE-2024-30171

A vulnerability exists in the Bouncy Castle Java TLS API and JSSE Provider (versions before 1.78). The root cause is timing-based leakage that may occur during RSA-based handshakes due to improper exception processing . This issue affects the org.bouncycastle:bcprov-jdk18on package and the strimz...

5.9CVSS6.5AI score0.00901EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/05/09 12:00 a.m.•56 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

6.5AI score0.00901EPSS
SaveExploits1References4
Mend
Mend
•added 2024/05/09 12:00 a.m.•9 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

8.2CVSS6.5AI score0.00901EPSS
SaveExploits1References9
Rows per page
Query Builder