netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-m44j-cfrm-g8qc

Browse Source
This commit is contained in:
advisory-database[bot]
2024-12-02 16:28:57 +00:00
parent 8a7422beda
commit 3f7e1c7cae
1 changed files with 12 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/05/GHSA-m44j-cfrm-g8qc/GHSA-m44j-cfrm-g8qc.json
+12 -27
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m44j-cfrm-g8qc",
"modified": "2024-11-05T21:33:59Z",
"modified": "2024-12-02T16:27:23Z",
"published": "2024-05-14T15:32:54Z",
"aliases": [
"CVE-2024-30172"
],
"summary": "Bouncy Castle crafted signature and public key can be used to trigger an infinite loop",
"details": "An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.",
"details": "An issue was discovered in Bouncy Castle Java Cryptography APIs starting in 1.73 and before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.",
"severity": [
{
"type": "CVSS_V3",
@@ -29,26 +29,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.78"
}
]
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.bouncycastle:bcprov-jdk15on"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
"introduced": "1.73"
},
{
"fixed": "1.78"
@@ -67,7 +48,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
"introduced": "1.73"
},
{
"fixed": "1.78"
@@ -86,7 +67,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
"introduced": "1.73"
},
{
"fixed": "1.78"
@@ -105,7 +86,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
"introduced": "1.73"
},
{
"fixed": "1.78"
@@ -124,7 +105,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
"introduced": "1.73"
},
{
"fixed": "1.78"
@@ -143,7 +124,7 @@
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
"introduced": "1.73"
},
{
"fixed": "1.78"
@@ -196,6 +177,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30172"
},
{
"type": "WEB",
"url": "https://github.com/bcgit/bc-java/commit/1b9fd9b545e691bfb3941a9f6a797660c8860f02"
},
{
"type": "WEB",
"url": "https://github.com/bcgit/bc-java/commit/9c165791b68a204678b48ec11e4e579754c2ea49"