Junglewise Threat Intelligence
CVE-2024-29857: Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
CVE-2024-29857 · Severity: low · CVSS 3.1 · Published 2024-05-14
Technologies: org.bouncycastle:bc-fips (Maven), org.bouncycastle:bcprov-jdk14 (Maven), BouncyCastle (NuGet), org.bouncycastle:bcprov-jdk18on (Maven), org.bouncycastle:bcprov-jdk15on (Maven), BouncyCastle.Cryptography (NuGet), org.bouncycastle:bcprov-jdk15to18 (Maven), org.bouncycastle:bctls-jdk15to18 (Maven), org.bouncycastle:bctls-jdk14 (Maven), org.bouncycastle:bctls-jdk18on (Maven). Vendors: Maven, NuGet.
Executive brief
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
Affected products
- Maven org.bouncycastle:bc-fips
- Maven org.bouncycastle:bcprov-jdk14
- NuGet BouncyCastle
- Maven org.bouncycastle:bcprov-jdk18on
- Maven org.bouncycastle:bcprov-jdk15on
- NuGet BouncyCastle.Cryptography
- Maven org.bouncycastle:bcprov-jdk15to18
- Maven org.bouncycastle:bctls-jdk15to18
- Maven org.bouncycastle:bctls-jdk14
- Maven org.bouncycastle:bctls-jdk18on