​
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2024-30172

Published

Last updated

https://nvd.nist.gov/vuln/detail/CVE-2024-30172

Severity

5.3

Medium

CVSS V3

Summary

Bouncy Castle crafted signature and public key can be used to trigger an infinite loop

Description

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.

References

Affected packages

Safe Source for Open Source™
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Chainguard Images

Container Image SecurityVulnerability RemediationCompliance and Risk MitigationSoftware Supply Chain SecurityAI/ML Security

Customer StoriesChainguard Love

About UsOpen SourceCareersNewsroomLegal

Unchained BlogResearchEventsTrust CenterDocumentation