Junglewise Threat Intelligence

CVE-2023-33202: Bouncy Castle Denial of Service (DoS)

CVE-2023-33202 · Severity: low · CVSS 3.1 · Published 2023-11-23

Technologies: org.bouncycastle:bcprov-jdk14 (Maven), org.bouncycastle:bcprov-ext-jdk15on (Maven), org.bouncycastle:bcprov-ext-jdk16 (Maven), org.bouncycastle:bcprov-jdk16 (Maven), org.bouncycastle:bcprov-jdk18on (Maven), org.bouncycastle:bcprov-jdk15on (Maven), org.bouncycastle:bcprov-jdk15 (Maven), org.bouncycastle:bcprov-jdk15to18 (Maven). Vendors: Maven.

Executive brief

Bouncy Castle Denial of Service (DoS)

Affected products

  • Maven org.bouncycastle:bcprov-jdk14
  • Maven org.bouncycastle:bcprov-ext-jdk15on
  • Maven org.bouncycastle:bcprov-ext-jdk16
  • Maven org.bouncycastle:bcprov-jdk16
  • Maven org.bouncycastle:bcprov-jdk18on
  • Maven org.bouncycastle:bcpkix-jdk18on
  • Maven org.bouncycastle:bcprov-jdk15on
  • Maven org.bouncycastle:bcprov-jdk15
  • Maven org.bouncycastle:bcprov-jdk15to18

Related threats