PT-2019-4597 · Bouncy Castle · Bouncy Castle Crypto

Publicado 2019-10-08 · Atualizado 2024-06-15 · CVE-2019-17359

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Bouncy Castle Crypto versions 1.63

Description The issue is related to the ASN.1 parser, which can trigger a large attempted memory allocation, resulting in an OutOfMemoryError, via crafted ASN.1 data. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For Bouncy Castle Crypto version 1.63, update to version 1.64 to resolve the issue.

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

BDU:2020-00689

CVE-2019-17359

GHSA-2MH8-GX2M-MR75

OPENSUSE-SU-2024:10661-1

Produtos afetados

Bouncy Castle Crypto

Referências · 47

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17359 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-17359 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-13098 · Nota
• https://suse.com/security/cve/CVE-2016-1000344 · Nota
• https://security.netapp.com/advisory/ntap-20191024-0006 · Nota
• https://suse.com/security/cve/CVE-2020-28052 · Nota
• https://lists.apache.org/thread.html/r16c3a90cb35ae8a9c74fd5c813c16d6ac255709c9f9d71cd409e007d%40%3Ccommits.tomee.apache.org%3E · Nota
• https://oracle.com/security-alerts/cpuoct2020.html · Correção
• https://osv.dev/vulnerability/CVE-2019-17359 · Aviso do Fabricante
• https://lists.apache.org/thread.html/r16c3a90cb35ae8a9c74fd5c813c16d6ac255709c9f9d71cd409e007d@%3Ccommits.tomee.apache.org%3E · Nota
• https://suse.com/security/cve/CVE-2016-1000340 · Nota
• https://lists.apache.org/thread.html/r02f887807a49cfd1f1ad53f7a61f3f8e12f60ba2c930bec163031209@%3Ccommits.tomee.apache.org%3E · Nota
• https://oracle.com/security-alerts/cpujan2020.html · Correção
• https://lists.apache.org/thread.html/r79b6a6aa0dd1aeb57bd253d94794bc96f1ec005953c4bd5414cc0db0@%3Ccommits.tomee.apache.org%3E · Nota
• https://lists.apache.org/thread.html/r467ade3fef3493f1fff1a68a256d087874e1f858ad1de7a49fe05d27%40%3Ccommits.tomee.apache.org%3E · Nota