​
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2024-29857

Published

Last updated

https://nvd.nist.gov/vuln/detail/CVE-2024-29857

Severity

5.3

Medium

CVSS V3

Summary

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

Description

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters.

References

Affected packages


Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images