PT-2023-4874 · Unknown+5 · Bouncy Castle For Java+5

Published 2023-07-01 · Updated 2026-03-18 · CVE-2023-33201

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bouncy Castle For Java versions prior to 1.74

Description The issue is related to an LDAP injection vulnerability in Bouncy Castle For Java. It affects applications that use an LDAP CertStore to validate X.509 certificates. During certificate validation, Bouncy Castle inserts the certificate's Subject Name into an LDAP search filter without proper escaping, leading to the vulnerability. This can be exploited to disclose protected information, especially if an attacker generates a self-signed certificate with a subject name containing special characters. The exploitation depends on the target LDAP directory's structure and the type of errors exposed to the user.

Recommendations For versions prior to 1.74, update to version 1.74 or later to resolve the issue. As a temporary workaround, consider disabling the use of LDAP CertStore from Bouncy Castle for validating X.509 certificates until a patch is applied. Restrict access to the X509LDAPCertStoreSpi.java class to minimize the risk of exploitation. Avoid using certificate subject names that contain special characters in the affected API endpoints until the issue is resolved.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2023-05362

CVE-2023-33201

DLA-3514-1

GHSA-HR8G-6V94-X4M9

OESA-2023-1391

OESA-2023-1504

OPENSUSE-SU-2024:13016-1

RHSA-2023:5484

RHSA-2023:5485

RHSA-2023:5486

RHSA-2023:7482

RHSA-2023:7483

RHSA-2023:7484

SUSE-SU-2023:2843-1

SUSE-SU-2023_2843-1

USN-8108-1

Affected Products

Astra Linux

Bouncy Castle For Java

Debian

Linuxmint

Suse

Ubuntu

References · 39

• 🔥 https://github.com/bcgit/bc-java/wiki/CVE-2023-33201 · Exploit
• https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc · Patch
• https://osv.dev/vulnerability/DLA-3514-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-34447 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-30172 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-33201 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-33201 · Security Note
• https://ubuntu.com/security/CVE-2025-8916 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13016-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-33201 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8108-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1391 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8108-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-33201 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hr8g-6v94-x4m9 · Vendor Advisory