GitHub Advisoryadvisory · Maven, NuGet

GHSA-v435-xc8x-wvr9 Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

MEDIUM Published 2024-05-14 Modified 2024-09-09 Official page ↗
Aliases
CVE-2024-30171
Ecosystem
Maven, NuGet
Packages
org.bouncycastle:bctls-fips, org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bctls-jdk18on, org.bouncycastle:bctls-jdk14, org.bouncycastle:bctls-jdk15to18, BouncyCastle, BouncyCastle.Cryptography
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-203
Reviewed
2024-05-14

Affected packages

• Maven org.bouncycastle:bctls-fips: < 1.0.19 → fixed in 1.0.19 • Maven org.bouncycastle:bcprov-jdk18on: < 1.78 → fixed in 1.78 • Maven org.bouncycastle:bcprov-jdk15on: < 1.78 → fixed in 1.78 • Maven org.bouncycastle:bcprov-jdk15to18: < 1.78 → fixed in 1.78 • Maven org.bouncycastle:bcprov-jdk14: < 1.78 → fixed in 1.78 • Maven org.bouncycastle:bctls-jdk18on: < 1.78 → fixed in 1.78 • Maven org.bouncycastle:bctls-jdk14: < 1.78 → fixed in 1.78 • Maven org.bouncycastle:bctls-jdk15to18: < 1.78 → fixed in 1.78 • NuGet BouncyCastle: < 2.3.1 (no fix yet) • NuGet BouncyCastle.Cryptography: < 2.3.1 → fixed in 2.3.1

Description

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Related

Alias · CVE (1)

  • CVE-2024-30171 An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. vulnerability

Weakness · CWE (1)

  • CWE-203 Observable Discrepancy weakness

References