VDB
BDU%3A2024-05561
BDU%3A2024-05561
PUBLISHED
CVSS 5 MEDIUM
Уязвимость файлов ECCurve.java и ECCurve.cs библиотеки проверки ключа EC модуля Math средств криптографической защиты Bouncy Castle Crypto Package For Java (BC Java), Bouncy Castle Java Long Term Stable (LTS) (BC-LJA), Bouncy Castle FIPS Java API (BC-FJA) и Bouncy Castle Cryptography Library For .NET, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Legion of the Bouncy Castle Inc. | Bouncy Castle Crypto Package For Java, Bouncy Castle FIPS Java API (BC-FJA), Bouncy Castle Cryptography Library For .NET, Bouncy Castle Java Long Term Stable (LTS) (BC-LJA) |
Timeline
- Jul 22, 2024 CVE Published
References
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857 url
- https://github.com/advisories/GHSA-8xfc-gm6g-vgpv url
- https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857 url
- https://ossindex.sonatype.org/vulnerability/CVE-2024-29857?component-type=maven&component-name=org.bouncycastle%2Fbc-fips url
- https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281 advisory
- https://www.bouncycastle.org/download/bouncy-castle-java/ advisory
- https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63 advisory
- https://www.bouncycastle.org/download/bouncy-castle-c/ advisory
- https://www.bouncycastle.org/download/bouncy-castle-java-lts/ advisory
- https://www.bouncycastle.org/download/bouncy-castle-java-fips/ advisory
- https://downloads.bouncycastle.org/fips-java/bc-fips-1.0.2.5-sources.jar advisory
- https://repo1.maven.org/maven2/org/bouncycastle/bc-fips/1.0.2.5/bc advisory