DNS Poisoning

2024-05-0606:27:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

ssl/tls

hostname verification

bouncy castle

java

cryptography

dns poisoning

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Bouncy Castle Java Cryptography APIs are vulnerable to improper SSL/TLS hostname verification. The vulnerability is due to hostname verification potentially being performed against a DNS-resolved IP address when no explicit hostname is provided, which could lead to DNS poisoning risks.

CPENameOperatorVersion
bouncy castle jsse provider and tls/dtls apile1.77
bouncy castle jsse provider and tls/dtls apile1.77
bouncy castle providerle1.77
bouncy castle providerle1.77
bouncy castle providerle1.77
bouncy castle jsse provider and tls/dtls apile1.77
bouncy castle jsse provider and tls/dtls apile1.77
bouncy castle providerle1.77
bouncy castle providerle1.77
bouncy castle providerle1.77

Name	Operator	Version
bouncy castle jsse provider and tls/dtls api	le	1.77
bouncy castle jsse provider and tls/dtls api	le	1.77
bouncy castle provider	le	1.77
bouncy castle provider	le	1.77
bouncy castle provider	le	1.77
bouncy castle jsse provider and tls/dtls api	le	1.77
bouncy castle jsse provider and tls/dtls api	le	1.77
bouncy castle provider	le	1.77
bouncy castle provider	le	1.77
bouncy castle provider	le	1.77