An issue was discovered in Bouncy Castle Java Cryptography APIs before
1.78. An Ed25519 verification code infinite loop can occur via a crafted
signature and public key.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | bouncycastle | < any | UNKNOWN |
ubuntu | 20.04 | noarch | bouncycastle | < any | UNKNOWN |
ubuntu | 22.04 | noarch | bouncycastle | < any | UNKNOWN |
ubuntu | 24.04 | noarch | bouncycastle | < any | UNKNOWN |
ubuntu | 16.04 | noarch | bouncycastle | < any | UNKNOWN |
github.com/bcgit/bc-java/commit/9c165791b68a204678b48ec11e4e579754c2ea49 (r1rv78v1)
github.com/bcgit/bc-java/issues/1599
launchpad.net/bugs/cve/CVE-2024-30172
nvd.nist.gov/vuln/detail/CVE-2024-30172
security-tracker.debian.org/tracker/CVE-2024-30172
www.bouncycastle.org/latest_releases.html
www.cve.org/CVERecord?id=CVE-2024-30172