Lucene search
Ubuntu.comUB:CVE-2024-30172HistoryMay 14, 2024 - 12:00 a.m.
CVE-2024-30172
2024-05-1400:00:00
ubuntu.com
ubuntu.com
36
security
vulnerability
cve-2024-30172
unix
An issue was discovered in Bouncy Castle Java Cryptography APIs before
1.78. An Ed25519 verification code infinite loop can occur via a crafted
signature and public key.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | bouncycastle | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | bouncycastle | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | bouncycastle | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | bouncycastle | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | bouncycastle | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | bouncycastle | < any | UNKNOWN |
References
github.com/bcgit/bc-java/commit/9c165791b68a204678b48ec11e4e579754c2ea49 (r1rv78v1)
github.com/bcgit/bc-java/issues/1599
launchpad.net/bugs/cve/CVE-2024-30172
nvd.nist.gov/vuln/detail/CVE-2024-30172
security-tracker.debian.org/tracker/CVE-2024-30172
www.bouncycastle.org/latest_releases.html
www.cve.org/CVERecord?id=CVE-2024-30172
Related
gitlab
gitlab
veracode
veracode
Denial Of Service (DoS)
2024-04-25 15:54:44
github
github
debiancve
debiancve
CVE-2024-30172
2024-05-14 15:21:53
osv
osv
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
2024-05-14 15:32:54
CGA-9j68-hcjr-5xfx
2024-07-03 00:34:21
CGA-vxwq-f5f4-5vmj
2024-06-19 07:37:12
cgr
cgr
CVE-2024-30172 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2024-30172
2024-05-09 00:00:00
vulnrichment
vulnrichment
CVE-2024-30172
1976-01-01 00:00:00
nvd
nvd
CVE-2024-30172
2024-05-14 15:21:53
wolfi
wolfi
CVE-2024-30172 vulnerabilities
2024-07-03 09:08:38
cve
cve
CVE-2024-30172
2024-05-14 15:21:53
redhatcve
redhatcve
CVE-2024-30172
2024-06-19 03:20:44
