Fluid Attacks Database

Description

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
maven	org.bouncycastle:bctls-fips	>=0 <1.0.19	1.0.19
maven	org.bouncycastle:bcpkix-jdk14	<0	1.78
maven	org.bouncycastle:bcpkix-jdk18on	<0	1.78
maven	org.bouncycastle:bcprov-jdk14	>=0 <1.78	1.78
maven	org.bouncycastle:bcprov-jdk15on	>=0 <1.78	1.78
maven	org.bouncycastle:bctls-jdk14	>=0 <1.78	1.78
maven	org.bouncycastle:bcprov-jdk18on	>=0 <1.78	1.78
maven	org.bouncycastle:bctls-jdk15to18	>=0 <1.78	1.78
debian 11	bouncycastle	=1.68-2 \|\| =1.68-3 \|\| =1.68-4 \|\| =1.68-5 \|\| =1.69-1 \|\| =1.71-1 \|\| =1.72-1 \|\| =1.72-2 \|\| =1.77-1 \|\| =1.80-1 \|\| =1.80-2 \|\| =1.80-3	-
debian 12	bouncycastle	=1.72-2 \|\| =1.77-1 \|\| =1.80-1 \|\| =1.80-2 \|\| =1.80-3	-

1-10 of 17

Aliases

1. CVE-2024-301712. NVD-2024-301713. OSV-2024-301714. OSV-DEBIAN-2024-301715. GHSA-v435-xc8x-wvr96. GCVE-2024-301717. SECURITY-TRACKER-CVE-2024-30171

References

1. https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c2172. https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb03. https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d4. https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%90301715. https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%90301716. https://security.netapp.com/advisory/ntap-20240614-00087. https://www.bouncycastle.org/latest_releases.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.