CVE-2024-30171

Aliases:CGA-5mrq-75x2-g8hjCGA-2f4h-fc34-cw83CGA-9qv8-44xh-vf2pGHSA-v435-xc8x-wvr9CGA-9QV8-44XH-VF2PDEBIAN-CVE-2024-30171CGA-2mxg-fm79-jhpfCGA-2v5m-423x-wrphCGA-326w-4vg3-wvfmCGA-43hq-jg9x-wpg4CGA-4qcg-f595-fh62CGA-4wh9-9qmj-3fmgCGA-5279-9hwx-3c49CGA-5cxw-c6fx-jf8mCGA-6c54-hwpv-7v7gCGA-8xgw-44vj-f78jCGA-994j-mfpj-45fxCGA-c4jj-3rxr-q4qrCGA-f8h6-x572-864gCGA-ggv8-www2-gmrrCGA-p2gc-c3v6-673fCGA-2233-jj5p-36xfCGA-2389-f3r6-59vhCGA-289p-f8qj-5c99CGA-2h2m-c6xh-fm7fCGA-2rwg-pfm7-m2gjCGA-3829-752p-9r9mCGA-3cwc-gg8x-7hhhCGA-3fcv-q6mv-vjxrCGA-3phj-cj4g-m7g9CGA-4253-3jv4-9532CGA-4287-qcmh-56j6CGA-43pm-jfg2-wjm2CGA-4h29-f2r5-c5p8CGA-4jgw-gfcf-pmggCGA-4m57-6rg4-87wgCGA-4qc7-2g6v-gwf2CGA-4r3h-9g4j-gf35CGA-4v7x-3px2-w656CGA-4wcj-x48c-65hwCGA-4xqm-cg2p-hghwCGA-596g-f67w-v4w2CGA-59x8-m3hj-j4cmCGA-5f55-rprw-966gCGA-5f7p-xm9g-97p5CGA-5m36-rc8p-q7hcCGA-5r3v-2rp9-w359CGA-5xgj-983r-xx57CGA-65xm-7vqq-m76pCGA-6g9r-vjp5-75fvCGA-6jfr-4vw7-qqvmCGA-6p35-vfw3-m5m7CGA-6v85-p53m-p3wvCGA-6wh8-hv75-3hf7CGA-6xc6-6c6g-mjj9CGA-76vc-v7wv-6x4rCGA-78cw-92h5-h4m5CGA-7h55-f6g3-p3p7CGA-7jp2-ggc5-3ff4CGA-7jv9-5jrp-2hp9CGA-7mpv-f646-pm6vCGA-7p3x-x8v7-frwqCGA-7px4-xrr8-65g7CGA-7ww8-wcfh-8jrrCGA-859j-7xw8-x4pwCGA-884p-57gr-cxc5CGA-8gqc-7895-wr6jCGA-8gx9-8mj7-8pmjCGA-8q53-q3c5-pfpcCGA-8w4f-c964-m82wCGA-922q-xrcq-2hpmCGA-94pm-ffh2-3h8pCGA-9fvp-8fm4-fpjwCGA-9p2m-668c-wrrxCGA-9q45-qj69-4vrxCGA-9rcv-hgqx-wrxcCGA-c2pf-qc73-6q82CGA-c484-3pg5-mjpgCGA-c4rr-fxp3-hg5xCGA-c58m-g4r4-r3p9CGA-c765-3ch7-p8cxCGA-c9gh-x4mx-6745CGA-chm9-cxc7-cg25CGA-cj8f-4mf8-4xv3CGA-cw37-c9p4-hj3fCGA-cx3v-3gww-qhg4CGA-f2m7-vxmq-r79xCGA-f379-xg87-83v8CGA-f44h-m9gc-gjwrCGA-fhr7-45c8-v22rCGA-fjrx-x59x-g6cfCGA-fpmr-gmfq-jgmqCGA-fqpf-jgmm-r5xcCGA-fwxv-f6rw-gm3rCGA-fx77-6qmr-9fqfCGA-fxfm-4w5h-j7fqCGA-g5xc-38fq-c7pxCGA-gcvc-m8h9-29rfCGA-gcx7-gxhf-7frgCGA-gfqm-xw4q-5p3hCGA-gm22-f4m9-grqpCGA-gp3f-hqwg-jcc9CGA-gqq7-9pmx-7cpxCGA-grwm-vxcc-5g4cCGA-gw3w-2qwx-mjf5CGA-h54x-2299-mmp7CGA-hfm2-rhqr-69rqCGA-hmrw-9rf6-5g5xCGA-hvm2-8c62-ghm8CGA-j26f-cwv7-c8m6CGA-j2h8-29fw-87hhCGA-j8c3-w8rr-5pfcCGA-j8pj-g2j7-587pCGA-jfw4-266h-j7xjCGA-jgh2-j6g5-5q6cCGA-jjxg-245j-rf74CGA-jp6w-h59v-m7x9CGA-jq5v-46fp-ppv6CGA-m3xv-7v95-m495CGA-m4wx-4g29-fqc7CGA-m75c-5m7w-4pf6CGA-mgvx-7fcj-2gp3CGA-mph6-vwh7-g79wCGA-mvw9-5gpv-xghfCGA-mx7g-9rvv-cqmpCGA-p99g-p5jr-vfmjCGA-pf8g-j7gj-jghgCGA-pg4r-hp62-c74xCGA-pj2q-7q74-7wwmCGA-pp66-g62g-jwcfCGA-pp6j-57xf-vhm3CGA-pq9q-7vhw-5w6pCGA-prwm-frcp-969qCGA-pv2q-7c76-xxh7CGA-pv45-cfmp-88qhCGA-pvfm-gxjr-529pCGA-pwc8-4m6j-qqmqCGA-px2m-r6q8-w468CGA-q244-27m6-3p9pCGA-q54m-3348-x8p7CGA-q56j-6ph5-vr7hCGA-qgjp-x59w-vmvmCGA-qj2x-xc3m-mcqvCGA-qv2f-m747-x5rgCGA-r32j-3xqj-h3wpCGA-r52j-3334-mfmqCGA-r5hh-xm3h-mqh9CGA-r5vx-rj8p-259qCGA-r6c4-8788-8f2cCGA-r8hj-p7wg-jv4fCGA-r8rf-6945-q2x7CGA-rmw8-7g3h-p9cfCGA-rq9h-v3vf-4rxpCGA-rwjj-v4f4-952pCGA-v5vj-6734-vhxmCGA-v6hm-rqv8-fjqxCGA-vc5h-46fc-v3qhCGA-vj79-879q-29p6CGA-vmw9-gc9j-64gwCGA-vpf3-qq9r-fhjpCGA-vpg4-xj3x-rrhqCGA-vqfr-9c89-fh48CGA-vrp9-6v7c-f9c5CGA-vvm9-hcc4-5p6jCGA-vw9w-9453-q52hCGA-vx5x-7g68-j3fpCGA-vxc8-fv95-v83gCGA-w5cm-p4rj-v99fCGA-w7qm-hgcw-x7xmCGA-wcgp-j8wx-r82qCGA-wm4w-hwp5-76xmCGA-ww6r-3m4m-8495CGA-wx6c-mwqf-c3hqCGA-x2h5-9g4c-7h7cCGA-x3qp-5j2x-pvx8CGA-x764-w7wv-p6wmCGA-xg3g-35vv-wj5fCGA-xh5v-mhxc-wvjrCGA-xmh9-53pm-j6cpCGA-xrwm-6mhc-wrfqCGA-289p-2534-2mwwCGA-2c3g-mp3q-h49qCGA-2c4g-2g3f-mmwfCGA-45vg-2pv8-mqwhCGA-48hv-3vp3-2j24CGA-4ccr-w65j-7j78CGA-5x56-vc5p-36jqCGA-5xf7-9c8c-7m44CGA-67h8-26h5-hj84CGA-6c27-59pm-r93hCGA-6p84-33rh-2gm9CGA-79mw-32wc-3gxfCGA-8c5x-cf68-j8vhCGA-8qg2-mh8f-jpcxCGA-956g-298v-5cxjCGA-9f7r-ppxm-xrh5CGA-9gpv-85hr-rj46CGA-9h6x-qmjw-grf4CGA-9j85-7338-76rcCGA-9r3m-rhmv-8432CGA-9rcf-hwxr-6xrxCGA-9x39-jx7j-m65vCGA-c8mp-6448-ph8pCGA-cchg-766c-qfh5CGA-cr3c-xrpf-9897CGA-cx7c-h7cx-fw39CGA-ghp8-2r76-hmcxCGA-gwcw-x5hw-7xq8CGA-h3rw-wmcg-wc7gCGA-h9jx-v94h-3r5fCGA-hc34-rg23-vcw2CGA-m5mc-w5pq-42pjCGA-mggc-9p92-qqx4CGA-mm8q-x4q3-xwgmCGA-pwpv-jgjh-wcfxCGA-q4x8-m6rv-959fCGA-q852-wx7p-573hCGA-qpvp-x6c6-frvrCGA-qrwp-227f-2pg6CGA-rrvh-fv4p-m9xmCGA-rxwm-xj4m-jxghCGA-v3f6-6pjp-j59jCGA-v68v-3qrq-w2qwCGA-v7pw-7hrx-pqqgCGA-vfmv-c77c-w3x9CGA-vrvw-q6hg-r2c2CGA-vxfw-pj45-63xjCGA-w2f6-rrf8-jc7qCGA-wcff-8jc6-wwhvCGA-x5mr-4hh6-pg42CGA-xf93-44v4-p679CGA-25rx-vwrw-7w99CGA-2cf4-mqpf-336hCGA-2rxq-9f7w-xjrpCGA-2v5j-2qxp-qhggCGA-2v6m-jhw3-9c2fCGA-2w9g-43w6-6mjhCGA-2x9g-cx58-h3m6CGA-38xf-5vgv-98w2CGA-3937-4656-6c2fCGA-4j94-gv5q-fw5xCGA-5wf5-wqc6-jrh9CGA-65mg-fjvw-cgp7CGA-6p94-qmww-g4pcCGA-6q3q-rfj9-qhhwCGA-6qf8-j573-7jjrCGA-7475-g24x-8gm8CGA-7jg2-hr27-cf8fCGA-85mc-hhqp-r39vCGA-87cw-x7pr-3f7fCGA-888q-7637-3fr9CGA-8jpx-gpx4-j92wCGA-8v87-5w8m-xhvjCGA-92f3-f86q-jrrpCGA-947r-gcj8-35hqCGA-96gm-ghwh-37f3CGA-97gp-w348-99c3CGA-97h6-p4wh-m3h6CGA-9h3w-q8vg-259qCGA-c5ww-35r2-q4g2CGA-cfjc-v897-2h3hCGA-cpvf-w764-jf49CGA-cv7m-2pvp-gfg6CGA-f85w-ccwg-76qmCGA-f897-86g7-28vqCGA-frm9-c4rv-fv4mCGA-fv4p-j4gx-9h43CGA-g62q-6fcg-fwrqCGA-gcv6-28wx-jvvjCGA-gh43-pvr9-cp6pCGA-gqhw-xqg9-4w8rCGA-h45w-vm8r-h9rxCGA-hwf6-87c4-grxxCGA-jcvc-qh4h-9xq6CGA-jqfc-m859-6vvjCGA-jr5w-47rv-xjqfCGA-m55m-w6hp-mfw4CGA-m5gf-chc6-2cc2CGA-mf87-frx7-qx5gCGA-mxfc-56h2-9fv6CGA-p77q-9xch-66g2CGA-p852-7jr9-3686CGA-p99x-h262-jmc7CGA-pmrc-w768-q8q9CGA-ppcq-8phm-586vCGA-q22q-vfc6-gp8mCGA-qfcq-vfgg-hw54CGA-qhcj-j27p-5m2vCGA-qm5h-88x7-qpgvCGA-qqhq-929w-4crmCGA-qrf8-4ph8-92m5CGA-qx79-pp69-grp3CGA-r3w5-89gf-62prCGA-r48j-prf6-fvhvCGA-r894-937f-8pcfCGA-rx5x-v72h-9g96CGA-rxfj-5285-g378CGA-v6xf-vc8c-gghhCGA-vhp5-36p5-j8x9CGA-vmc6-wg8r-gg2xCGA-vpgp-mqq5-c2mvCGA-vr7w-x7r9-fmmqCGA-vrcm-x84r-jc68CGA-vvrj-j4gr-v7mgCGA-wc5f-3v5h-cxxrCGA-wfpp-m42c-22h3CGA-wq7w-q32m-mh63CGA-x2g5-pmj8-gw2fCGA-x3v5-3ccj-g3j5CGA-xvg9-mj6p-4qfmCGA-2577-4xq3-6ww6CGA-283v-56jx-gr77CGA-2p76-v828-m96mCGA-2rjw-jm2h-7xfcCGA-35hh-5792-8jpwCGA-3jv4-hc24-vfrxCGA-3mw6-6m7q-cp3jCGA-3p7w-4jx6-c8qxCGA-443m-wr8h-348qCGA-4586-p6x6-mv9hCGA-4w2p-w236-j6fpCGA-5hrf-2cpq-fvmrCGA-5jgj-mhq4-6757CGA-624f-rw2x-w5mcCGA-64g3-frg2-jrhcCGA-657v-7rjf-9mprCGA-672x-5qmx-7m8cCGA-6mxg-hgqj-37qpCGA-6r5h-hjv8-35gjCGA-76wr-qgc5-2g2wCGA-7wc8-jp2w-6r28CGA-89wp-9f6c-mmpcCGA-8pvg-p2vf-8vm3CGA-9452-vcgx-qcm2CGA-9h3r-7h4g-f6w3CGA-c438-gx87-whh7CGA-c5cw-cr48-c4c6CGA-f3vr-v755-g5crCGA-fr6w-g82f-fxf5CGA-gvgp-9w2f-cvv4CGA-hh2w-rf8h-53hmCGA-hvcx-whq3-877xCGA-j5f4-qjhh-q6hfCGA-m3xv-3hgj-7pjmCGA-m6hq-96jm-5j2xCGA-p29v-j25c-wfjfCGA-p2j4-9536-q3c6CGA-p7gr-9c26-wcv2CGA-p9h4-gpxf-8xhqCGA-pcj8-284m-77q2CGA-pjwc-jgvp-qf4rCGA-pp69-xj7x-hh47CGA-pq34-5xfr-phghCGA-q2xg-5xf7-9mc7CGA-r8vr-62v8-jvrjCGA-r9vj-fv3r-765rCGA-rcmg-9mp8-7pcvCGA-rfpx-4vfp-rgcmCGA-v4rj-wgj3-8m4qCGA-vm55-p326-952hCGA-vm93-96f3-68p8CGA-vmcr-7j32-vwhcCGA-wf98-8mrg-67pmCGA-x2m3-j28w-5q8pCGA-xc32-hr6v-j7jrCGA-xc88-5wwv-q5cqCGA-xf57-j92j-q689CGA-xfrg-v7mf-p64wCGA-xg3q-hmpr-3r3wCGA-xp93-m3xr-gq9p
Advisory lineage Upstream: 0 Downstream: 11
Deferred
Published: 09 May 2024, 00:00
Last modified:19 Aug 2024, 17:18

Vulnerability Summary

Overall Risk (default)
low
24/100
CVSS Score
5.9 MEDIUM
v3.1 (cve.org)
EPSS Score
0.9% LOW
1% probability +0.80%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 May 2024, 00:00
Published
Vulnerability first disclosed
19 Aug 2024, 17:18
Last Modified
Vulnerability information updated

Description

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Trends

Current EPSS score: 0.90%• Percentile: 58%

Techniques & Countermeasures

  • CWE-203•Observable Discrepancy

    The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

Affected Systems

  • chainguard•apache-nifi

    < 1.26.0-r2

  • chainguard•bouncycastle-tls-fips

    < 1.0.19-r0

  • chainguard•druid

    < 37.0.0-r8

  • chainguard•eco-java-gradle-2.10

    all

  • chainguard•eco-java-gradle-2.11

    all

  • chainguard•eco-java-gradle-2.12

    all

  • chainguard•eco-java-gradle-2.13

    all

  • chainguard•eco-java-gradle-2.14

    all

  • chainguard•eco-java-gradle-2.14.1

    all

  • chainguard•eco-java-gradle-2.3

    all

  • chainguard•eco-java-gradle-2.4

    all

  • chainguard•eco-java-gradle-2.5

    all

  • chainguard•eco-java-gradle-2.6

    all

  • chainguard•eco-java-gradle-2.7

    all

  • chainguard•eco-java-gradle-2.8

    all

  • chainguard•eco-java-gradle-2.9

    all

  • chainguard•eco-java-gradle-3.0

    all

  • chainguard•eco-java-gradle-3.1

    all

  • chainguard•eco-java-gradle-3.2

    all

  • chainguard•eco-java-gradle-3.2.1

    all

  • chainguard•eco-java-gradle-3.3

    all

  • chainguard•eco-java-gradle-3.4

    all

  • chainguard•eco-java-gradle-3.4.1

    all

  • chainguard•eco-java-gradle-3.5

    all

  • chainguard•eco-java-gradle-3.5.1

    all

  • chainguard•eco-java-gradle-4.0

    all

  • chainguard•eco-java-gradle-4.0.1

    all

  • chainguard•eco-java-gradle-4.0.2

    all

  • chainguard•eco-java-gradle-4.1

    all

  • chainguard•eco-java-gradle-4.10

    all

  • chainguard•eco-java-gradle-4.10.1

    all

  • chainguard•eco-java-gradle-4.10.2

    all

  • chainguard•eco-java-gradle-4.10.3

    all

  • chainguard•eco-java-gradle-4.2

    all

  • chainguard•eco-java-gradle-4.2.1

    all

  • chainguard•eco-java-gradle-4.3

    all

  • chainguard•eco-java-gradle-4.3.1

    all

  • chainguard•eco-java-gradle-4.4

    all

  • chainguard•eco-java-gradle-4.4.1

    all

  • chainguard•eco-java-gradle-4.5

    all

  • chainguard•eco-java-gradle-4.5.1

    all

  • chainguard•eco-java-gradle-4.6

    all

  • chainguard•eco-java-gradle-4.7

    all

  • chainguard•eco-java-gradle-4.8

    all

  • chainguard•eco-java-gradle-4.8.1

    all

  • chainguard•eco-java-gradle-4.9

    all

  • chainguard•eco-java-gradle-5.0

    all

  • chainguard•eco-java-gradle-5.1

    all

  • chainguard•eco-java-gradle-5.1.1

    all

  • chainguard•eco-java-gradle-5.2

    all

Showing first 50 affected entries in server-rendered view.

References (10)