CVE-2024-29857

Aliases:CGA-pmw5-3929-3rqrCGA-h49m-7vwx-446fCGA-x9cj-c42r-f4mrGHSA-8xfc-gm6g-vgpvDEBIAN-CVE-2024-29857CGA-2jr9-cw5r-5vm5CGA-3gf4-qv9g-39rpCGA-46c6-ggwc-8mwhCGA-526p-77qf-vr68CGA-57cx-9p5q-49w3CGA-5qqr-gwcv-v34cCGA-6fc8-2xj7-hq6qCGA-6gh5-3mvc-qmmvCGA-7rwp-756m-gv9pCGA-8qhp-cwm2-4xvwCGA-c82f-grqj-g7g3CGA-cvwc-3vcj-xvggCGA-f348-23qv-ghpvCGA-jxrw-4r5c-c7hjCGA-p3gq-48h2-776gCGA-p8px-xff2-47hpCGA-22g7-w653-q8j7CGA-2955-m9cp-m2wmCGA-2g3h-87mf-29wmCGA-2r26-f9c3-5p4xCGA-2rwr-w42f-frggCGA-35hm-99xx-25v8CGA-3fj3-642h-3pqvCGA-3g42-h48x-49v2CGA-3gg8-hqr8-4c57CGA-3h32-jw4r-w5v6CGA-43j8-43j3-mmcvCGA-4c5m-fp6f-fq9jCGA-4gh3-x2wc-mmv2CGA-4rmj-3xm2-2vvmCGA-4rmw-p945-wrp7CGA-4v7w-qqv6-c72jCGA-4xr9-p3f9-h95wCGA-559q-8xch-235hCGA-55v9-rqrm-fcmhCGA-5h69-8xrm-4g95CGA-5jxv-2w23-f7j5CGA-5x8m-9jc3-jxp6CGA-62cx-4mv3-7xp2CGA-63jg-9q8g-24g8CGA-668h-57qc-jvw7CGA-66hm-g84v-32jfCGA-66jv-992c-5946CGA-66jv-cp83-87wvCGA-67vm-qcv6-j7w7CGA-67w2-xjwr-86v8CGA-68x8-66h2-rch7CGA-69vw-3rf2-prffCGA-6f9p-5wmp-6q8jCGA-6fxx-h8fr-8g88CGA-6ppj-mrv8-xcj6CGA-6qcc-86qf-j643CGA-6qpg-g7g4-8898CGA-6r25-chx6-87wrCGA-76qh-w7f7-j68fCGA-789v-pw97-mmr9CGA-7f86-q8jf-4q72CGA-7gv9-2c5j-c585CGA-7m2v-6j4j-h5w5CGA-7mrp-9625-873mCGA-7v3h-r48w-vq7cCGA-7v49-v29m-4hw6CGA-7vx9-p33h-p2x5CGA-7vxv-cv3x-rcc8CGA-8373-h9cv-j32wCGA-8647-gmhj-785xCGA-88h4-cc96-28hrCGA-8j5p-8qxg-65vjCGA-8qjp-cchw-2758CGA-8xgr-fmp8-j9xrCGA-9272-cqgq-6v9fCGA-928q-c6jp-8682CGA-9382-g4h2-q7fpCGA-997p-qg87-whwpCGA-9hcj-p222-j3mcCGA-9hrm-pp4g-p65mCGA-9j56-ghr9-m92jCGA-9m9h-3585-v9wcCGA-9wc8-77h5-8g7fCGA-9xfx-fj8v-p29hCGA-c4pr-3rr8-fv3vCGA-c55h-887x-vmw5CGA-c63w-w4qx-v4mqCGA-c64v-gh6c-3hm4CGA-c8qr-mw9f-g2x7CGA-ccmg-f9hv-q3h9CGA-ccrq-9527-ccg2CGA-cg93-p4m7-gg8mCGA-cgcc-qrv4-q598CGA-cp64-8q3j-6882CGA-cv8x-8qmc-7xj7CGA-cw2w-mcjc-r2phCGA-f4jh-pr89-9qrgCGA-f5xq-6g55-v5qrCGA-f7xc-gjmv-r68fCGA-fhx7-xw98-vg54CGA-fmpw-6h49-4xg4CGA-g272-xcfq-3fcfCGA-g55h-rqjm-c2gpCGA-g8j2-vfhm-w2xgCGA-gfcv-pg8j-qv36CGA-gmqq-p67p-5j4hCGA-gpc8-cfhr-jxp7CGA-grc3-j78h-wrgrCGA-gvx5-pj74-cmj3CGA-gwj2-wg7m-92f9CGA-h2wf-8qj8-w9rcCGA-h72q-xqgv-5r3jCGA-hhm3-8g8r-8qq6CGA-hphh-qfr5-qchcCGA-hv3q-jv96-fr85CGA-hw2q-q2w2-2fj4CGA-hwwp-45q9-w672CGA-hxfj-fhxr-vwmqCGA-jcmr-wcg4-gvxqCGA-jhjm-v7f9-8wq7CGA-m34g-6c6v-whchCGA-m359-9hwj-h8rgCGA-m6hg-m8gx-6g24CGA-m8mm-gw23-4cchCGA-m8x9-r8x3-wmg6CGA-mcmm-jhqm-7r76CGA-mf93-vgm3-h8r8CGA-mm7j-j4fm-29p2CGA-mp5g-857v-448rCGA-mrgx-5g86-p7mfCGA-mrpf-g4ph-vp3hCGA-mrwg-6g82-f7rmCGA-mw5c-hrq6-rj57CGA-mwwp-cg4f-3vj4CGA-mx8c-3f94-3v73CGA-mxc5-969m-44g5CGA-mxfp-c2q3-3566CGA-p4r2-6m99-366rCGA-q3mh-47pp-77fqCGA-q66h-xh7v-pmq7CGA-qc7j-85wg-jgw6CGA-qffj-47wm-wp7wCGA-qh4x-w63q-c33xCGA-qhvf-5gfg-3v99CGA-qw95-hxrm-9g2gCGA-qx33-gxq8-7r38CGA-r35p-r597-m9c8CGA-r3pj-8fq7-qf58CGA-r5rc-pvm9-hj46CGA-rg48-99gv-v2r6CGA-v7q4-7xjc-3jvvCGA-v995-prq5-qfmpCGA-vchh-f6jh-5jfqCGA-vhwq-qg76-6vchCGA-vj56-jcj9-jhr8CGA-vm89-mwmp-fp25CGA-vmpc-w6mm-rf7gCGA-vmr2-2454-mjc3CGA-vp4r-79m7-jh44CGA-vq89-p955-2g93CGA-vqcm-h529-236pCGA-vrfr-97r4-7jh9CGA-vxp9-8q79-qp5jCGA-w53x-8rxg-pfx3CGA-whx9-mvq7-qp82CGA-wm32-q6f6-8gqrCGA-wmr9-3hxc-p28cCGA-ww3q-fm6m-9gccCGA-wxw6-w5qr-8m48CGA-x3f9-f2h5-vhw7CGA-x6wf-58mq-p66hCGA-xc85-rqr5-w54jCGA-xgh8-mccp-q9vpCGA-xh94-fpc4-78v7CGA-xj3j-v2gc-542vCGA-xrw9-v54q-c3xvCGA-xx99-9254-j5jjCGA-xxpg-qg74-xcfwCGA-276x-rcjx-xxpwCGA-29v3-r44p-wrx8CGA-2mr4-qcww-567rCGA-2vq2-gcjj-6vm9CGA-48mq-3m73-36gcCGA-4c6m-pwcj-4vfxCGA-4xc9-p46h-f5cvCGA-5hhp-jgv3-vjrxCGA-5pm6-c355-45jvCGA-62w8-j6vj-x8m7CGA-66jj-mg8v-4wqwCGA-6fh2-9876-hrxhCGA-7m5c-53mj-69jcCGA-826j-33f4-m843CGA-83pj-hxgf-jvrmCGA-88rq-8hxv-9fcqCGA-8rpp-gr5j-hrpfCGA-93pm-4mhh-gg8xCGA-9556-g8cx-8x6gCGA-c2j6-g6x2-wpg7CGA-cr57-fjv2-w5v5CGA-f8jw-qrc7-68rcCGA-f974-67j4-6vc6CGA-g7x6-gqmh-ggxxCGA-g9wg-v8wq-w62gCGA-gh8x-8qj6-5j69CGA-hqvh-h9q2-rgvmCGA-j8x2-47v9-wm56CGA-jrxr-8wrr-hpjxCGA-jvc5-74w8-w2gmCGA-m3xm-63xr-h8hwCGA-m8c3-3qp6-q485CGA-pphq-8mgr-3gj6CGA-q7cw-qc77-pqq9CGA-qfmc-hcc8-55vrCGA-qv47-7mhg-hc9vCGA-r678-8h7v-c6pcCGA-r679-5q63-6fpfCGA-r98p-jc6w-mwhwCGA-r9vx-ccvx-q8vjCGA-rhqm-973w-qwjxCGA-rq57-62j2-rjrpCGA-v35r-7w7r-8vgrCGA-v9wc-rcfj-jp54CGA-vp86-8mrj-4hp4CGA-vxcc-9hw6-27fjCGA-wvhm-5gxw-rx68CGA-x3h9-c8g3-4q48CGA-xph9-7x4r-rw69CGA-xq7v-62hh-j4fvCGA-xr4h-3w9j-g8xvCGA-24mx-qhrm-xq47CGA-299f-fp7g-5rcgCGA-2fwq-mhgv-q7jgCGA-2r9f-94r2-wgvpCGA-39qg-vr2f-6vqmCGA-39qv-4fjx-942pCGA-3h2x-x2wf-c32hCGA-432m-gp2j-jgp8CGA-49c6-cjxx-9x5rCGA-5522-2rxj-h7pfCGA-5ffv-rq7j-xg2gCGA-5p43-8hpx-cjvgCGA-5wpw-vrvf-v72qCGA-5xj7-qhpw-rp86CGA-62vj-mrm6-p4fpCGA-66f4-4g8c-m949CGA-67fp-65mc-m9jrCGA-688r-jrx6-65hrCGA-6fq6-m9wj-4329CGA-6pm3-7p6w-9xq3CGA-6xhf-6mjg-9gr6CGA-74hw-v3vg-mwqfCGA-7f53-c7v4-9vxcCGA-7r9c-mr63-7262CGA-7vfj-jc8j-76mxCGA-8f7j-rg4p-6j89CGA-8g9g-gf4f-jf92CGA-8v8g-2cx8-hg6fCGA-8w3r-6jq6-3c3jCGA-8wmg-58w2-m5f8CGA-944v-49q7-xwmcCGA-98f2-hqg6-4wwwCGA-98vm-qjfg-fvxfCGA-9vh7-p8wx-272hCGA-ccww-q4fm-jr6qCGA-cj55-79qc-p68rCGA-cpc4-w5v4-jcp3CGA-f858-w3x4-4cf6CGA-fjwf-hfw5-rmcvCGA-fpfh-pjwr-rvm4CGA-fxq4-7vjf-hp3mCGA-g2f4-8mwq-5c5gCGA-g6hp-223j-28q3CGA-ggr5-m966-jwmmCGA-h638-w3v7-5jx2CGA-h6p3-vvmw-c3q5CGA-hcmp-w5hc-p6p8CGA-hjch-9c7q-r7jmCGA-hr84-4crq-cpxxCGA-hwrc-rx23-6ghxCGA-jgv8-v425-64x7CGA-m586-v3f8-8476CGA-m68j-c94w-7p4hCGA-m6r8-pxcg-g8rmCGA-m87m-fm45-w28rCGA-mx4h-wpq3-q7vfCGA-pc23-4hc5-827mCGA-qx74-g99v-hm3mCGA-qxfm-wvrg-q47xCGA-rf76-5rrj-fh73CGA-rfc6-4gr6-5q5fCGA-rfpj-7hxc-3xh8CGA-rqxq-h395-477wCGA-rvgw-5f9c-8jc5CGA-v2v2-cx3h-2c7gCGA-v37c-rx55-wjh9CGA-vfjc-8h8r-82fhCGA-vgh7-7mcf-vpcqCGA-w939-25gp-9r8pCGA-wm46-m3xr-rfj7CGA-wp46-fvmp-47p6CGA-wqvf-qpp4-w4pgCGA-wr3v-xfw4-p6r8CGA-x26v-335q-7w75CGA-xhff-g325-7mc4CGA-xjq3-fvw3-qp5rCGA-xqxp-6ppx-h334CGA-xwc7-cphv-fm2cCGA-25f9-9ph5-f6jqCGA-25q8-xhfj-3cpwCGA-2xgc-9228-q55qCGA-323v-rc6v-466gCGA-3359-32xp-7mmgCGA-39mf-69wf-fr9cCGA-3fv4-wmfq-hmmpCGA-428h-qhwr-67g2CGA-4hmw-vr53-qh62CGA-4qj5-vhr3-259wCGA-4wv5-9xjv-7jp7CGA-52cv-36vh-9grqCGA-5j2h-5h3c-7335CGA-5j3x-6578-4hhrCGA-6gp7-cq8v-vq5jCGA-6qp7-q5j7-jfc4CGA-74x4-9qq5-4cvrCGA-7q2q-p5wr-98jfCGA-84vx-gp4w-v75rCGA-8783-4qx3-qrqpCGA-8959-8x7p-c56pCGA-8rpv-r657-fc58CGA-8w68-jcfh-52q8CGA-8w8w-4qrj-pc38CGA-92wq-g4w3-4xw7CGA-9cw4-69h2-5xqvCGA-9qj4-862g-pr2pCGA-c2f5-6gw6-xx3vCGA-c7ph-v3hp-r454CGA-cx7x-h8jw-5gwjCGA-fhp7-9jp9-m6q2CGA-g75x-9gff-c68qCGA-g96v-fg9c-gpq3CGA-g99c-23wh-cfcxCGA-gqhg-vqwf-8j97CGA-gw52-jx5h-h52jCGA-h9w6-fcvc-72f3CGA-hqc5-m4wv-pq78CGA-hw9q-g946-jjhqCGA-jc4j-326h-26g4CGA-jfc2-xm43-335mCGA-jr3g-cv5p-g6gfCGA-jv3x-vj2m-hph4CGA-jwjh-2qvv-mw75CGA-jxp4-6vvh-9fgrCGA-m2x5-4mcp-57fgCGA-mw5m-wf7r-w759CGA-q55w-v2cc-chxrCGA-qhg8-gmgv-hcvgCGA-qm92-v9gf-6x45CGA-qx9x-qp2c-qw4xCGA-r7rv-p6m6-8wm2CGA-rcf3-8mvc-wxw2CGA-rrpm-7w57-5899CGA-rv89-6xx9-7wp9CGA-vxmp-fm5m-h2r3CGA-wpxp-xxp5-vgfrCGA-ww26-x2v3-gqpqCGA-x57w-7r25-3qc2CGA-x7p5-4ghv-8g6qCGA-xp69-j33h-wrhf
Advisory lineage Upstream: 0 Downstream: 10
Deferred
Published: 09 May 2024, 04:17
Last modified:13 Feb 2025, 15:47

Vulnerability Summary

Overall Risk (default)
medium
30/100
CVSS Score
7.5 HIGH
v3.1 (cve.org)
EPSS Score
1.1% LOW
1% probability +0.76%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 May 2024, 04:17
Published
Vulnerability first disclosed
13 Feb 2025, 15:47
Last Modified
Vulnerability information updated

Description

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters.

CVSS Metrics

  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • v3.1•MEDIUM•Score: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS Trends

Current EPSS score: 1.10%• Percentile: 64%

Techniques & Countermeasures

  • CWE-125•Out-of-bounds Read

    The product reads data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • chainguard•apache-nifi

    < 1.26.0-r2

  • chainguard•bouncycastle-fips

    < 2.0.0-r0

  • chainguard•druid

    < 37.0.0-r8

  • chainguard•eco-java-gradle-2.10

    all

  • chainguard•eco-java-gradle-2.11

    all

  • chainguard•eco-java-gradle-2.12

    all

  • chainguard•eco-java-gradle-2.13

    all

  • chainguard•eco-java-gradle-2.14

    all

  • chainguard•eco-java-gradle-2.14.1

    all

  • chainguard•eco-java-gradle-2.3

    all

  • chainguard•eco-java-gradle-2.4

    all

  • chainguard•eco-java-gradle-2.5

    all

  • chainguard•eco-java-gradle-2.6

    all

  • chainguard•eco-java-gradle-2.7

    all

  • chainguard•eco-java-gradle-2.8

    all

  • chainguard•eco-java-gradle-2.9

    all

  • chainguard•eco-java-gradle-3.0

    all

  • chainguard•eco-java-gradle-3.1

    all

  • chainguard•eco-java-gradle-3.2

    all

  • chainguard•eco-java-gradle-3.2.1

    all

  • chainguard•eco-java-gradle-3.3

    all

  • chainguard•eco-java-gradle-3.4

    all

  • chainguard•eco-java-gradle-3.4.1

    all

  • chainguard•eco-java-gradle-3.5

    all

  • chainguard•eco-java-gradle-3.5.1

    all

  • chainguard•eco-java-gradle-4.0

    all

  • chainguard•eco-java-gradle-4.0.1

    all

  • chainguard•eco-java-gradle-4.0.2

    all

  • chainguard•eco-java-gradle-4.1

    all

  • chainguard•eco-java-gradle-4.10

    all

  • chainguard•eco-java-gradle-4.10.1

    all

  • chainguard•eco-java-gradle-4.10.2

    all

  • chainguard•eco-java-gradle-4.10.3

    all

  • chainguard•eco-java-gradle-4.2

    all

  • chainguard•eco-java-gradle-4.2.1

    all

  • chainguard•eco-java-gradle-4.3

    all

  • chainguard•eco-java-gradle-4.3.1

    all

  • chainguard•eco-java-gradle-4.4

    all

  • chainguard•eco-java-gradle-4.4.1

    all

  • chainguard•eco-java-gradle-4.5

    all

  • chainguard•eco-java-gradle-4.5.1

    all

  • chainguard•eco-java-gradle-4.6

    all

  • chainguard•eco-java-gradle-4.7

    all

  • chainguard•eco-java-gradle-4.8

    all

  • chainguard•eco-java-gradle-4.8.1

    all

  • chainguard•eco-java-gradle-4.9

    all

  • chainguard•eco-java-gradle-5.0

    all

  • chainguard•eco-java-gradle-5.1

    all

  • chainguard•eco-java-gradle-5.1.1

    all

  • chainguard•eco-java-gradle-5.2

    all

Showing first 50 affected entries in server-rendered view.

References (10)