CVE-2024-29857
EUVD-2024-153314.05.2024, 15:17
An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| bouncycastle | bc-java | 𝑥 ≤ 1.77 | ADP |
| bouncycastle | bc-fja | 𝑥 ≤ 1.0.2.4 | ADP |
| bouncycastle | bc_c_.net | 𝑥 ≤ 2.3.0 | ADP |
Debian Releases
Ubuntu Releases
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| bouncycastle |
| ||
| bouncycastle-javadoc |
| ||
| bouncycastle-mail |
| ||
| bouncycastle-pg |
| ||
| bouncycastle-pkix |
| ||
| bouncycastle-tls |
| ||
| bouncycastle-util |
|
Common Weakness Enumeration
References