CVE-2024-30171: Medium severity nuget/BouncyCastle.Cryptography vulnerability
An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.
Other sources
BouncyCastle before version 1.78 is vulnerable to timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP).
References: https://www.bouncycastle.org/releasenotes.html https://github.com/bcgit/bc-java/issues/1528 https://people.redhat.com/~hkario/marvin/
— Red Hat
The Bouncy Castle Crypto Package For Java could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw in the RSA decryption (both PKCS#1v1.5 and OAEP) feature. By utilize timing side-channel attack techniques, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30171?
CVE-2024-30171 has been classified as a high-severity vulnerability due to its potential for timing side-channel attacks.
How do I fix CVE-2024-30171?
To fix CVE-2024-30171, update the Bouncy Castle libraries to versions 1.78 or higher for Maven packages, or to version 2.3.1 for NuGet packages.
What systems are affected by CVE-2024-30171?
CVE-2024-30171 affects Bouncy Castle Java TLS API and JSSE Provider versions before 1.78 along with several specific package variations.
What type of attack does CVE-2024-30171 enable?
CVE-2024-30171 enables timing-based side-channel attacks against RSA decryption in affected versions.
Which products utilize the vulnerable Bouncy Castle versions related to CVE-2024-30171?
IBM Security Verify Governance is one of the products that may utilize the vulnerable Bouncy Castle versions associated with CVE-2024-30171.