Infinite Loop Vulnerability in Bouncy Castle Java Cryptography APIs
CVE-2024-30172

Currently unrated

Key Information:

Vendor
CVE Published:
14 May 2024

What is CVE-2024-30172?

A vulnerability has been identified in the Bouncy Castle Java Cryptography APIs prior to version 1.78, where an infinite loop may occur during the Ed25519 signature verification process. This issue arises when a crafted signature and public key are used, potentially leading to denial of service conditions by consuming excessive processing resources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

References

Timeline

  • Vulnerability published

.