Executive brief
Out-of-Memory Error in Bouncy Castle Crypto
Affected products
- Maven org.bouncycastle:bcprov-jdk14
Junglewise Threat Intelligence
CVE-2019-17359: Out-of-Memory Error in Bouncy Castle Crypto
CVE-2019-17359 · Severity: low · CVSS 3.1 · Published 2019-10-17
Technologies: org.bouncycastle:bcprov-jdk14 (Maven). Vendors: Maven.
Related threats
- Bouncy Castle BC-JAVA timing channel in FrodoKEM
- Bouncy Castle BC-JAVA LDAP injection in LDAPStoreHelper
- Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
- Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
- Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")