diff --git a/advisories/github-reviewed/2024/05/GHSA-m44j-cfrm-g8qc/GHSA-m44j-cfrm-g8qc.json b/advisories/github-reviewed/2024/05/GHSA-m44j-cfrm-g8qc/GHSA-m44j-cfrm-g8qc.json index a1b7de41319..db13fd0af93 100644 --- a/advisories/github-reviewed/2024/05/GHSA-m44j-cfrm-g8qc/GHSA-m44j-cfrm-g8qc.json +++ b/advisories/github-reviewed/2024/05/GHSA-m44j-cfrm-g8qc/GHSA-m44j-cfrm-g8qc.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-m44j-cfrm-g8qc", - "modified": "2024-11-05T21:33:59Z", + "modified": "2024-12-02T16:27:23Z", "published": "2024-05-14T15:32:54Z", "aliases": [ "CVE-2024-30172" ], "summary": "Bouncy Castle crafted signature and public key can be used to trigger an infinite loop", - "details": "An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.", + "details": "An issue was discovered in Bouncy Castle Java Cryptography APIs starting in 1.73 and before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.", "severity": [ { "type": "CVSS_V3", @@ -29,26 +29,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" - }, - { - "fixed": "1.78" - } - ] - } - ] - }, - { - "package": { - "ecosystem": "Maven", - "name": "org.bouncycastle:bcprov-jdk15on" - }, - "ranges": [ - { - "type": "ECOSYSTEM", - "events": [ - { - "introduced": "0" + "introduced": "1.73" }, { "fixed": "1.78" @@ -67,7 +48,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "1.73" }, { "fixed": "1.78" @@ -86,7 +67,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "1.73" }, { "fixed": "1.78" @@ -105,7 +86,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "1.73" }, { "fixed": "1.78" @@ -124,7 +105,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "1.73" }, { "fixed": "1.78" @@ -143,7 +124,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "1.73" }, { "fixed": "1.78" @@ -196,6 +177,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30172" }, + { + "type": "WEB", + "url": "https://github.com/bcgit/bc-java/commit/1b9fd9b545e691bfb3941a9f6a797660c8860f02" + }, { "type": "WEB", "url": "https://github.com/bcgit/bc-java/commit/9c165791b68a204678b48ec11e4e579754c2ea49"