Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2024/05/14 3:32 p.m.•50 views

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS6.7AI score0.00901EPSS
SaveExploits1References9Affected Software10
NVD
NVD
•added 2024/05/14 3:21 p.m.•45 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS7.5AI score0.00901EPSS
SaveExploits1References4
OSV
OSV
•added 2024/05/14 3:21 p.m.•30 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

6.6AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•4 views

CVE-2024-30171: Observable Discrepancy

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

5.9CVSS5.7AI score0.00901EPSS
SaveExploits1References1
Mend
Mend
•added 2024/05/09 12:00 a.m.•3 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

8.2CVSS0.00901EPSS
SaveExploits1References9
CVE
CVE
•added 2024/05/09 12:00 a.m.•1420 views

CVE-2024-30171

A vulnerability exists in the Bouncy Castle Java TLS API and JSSE Provider (versions before 1.78). The root cause is timing-based leakage that may occur during RSA-based handshakes due to improper exception processing . This issue affects the org.bouncycastle:bcprov-jdk18on package and the strimz...

5.9CVSS6.5AI score0.00901EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/05/09 12:00 a.m.•67 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

6.6AI score0.00901EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/05/09 12:00 a.m.•56 views

CVE-2024-30171

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing...

7.2AI score0.00901EPSS
SaveExploits1References4
Rows per page
Query Builder