bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack)
Published May 9, 2024
5.9
MEDIUMCVSS 3.1
EPSS 0.90%
Description
An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.
Affected products
No data.
No data.
-
- Version 0StatusaffectedConstraints<1.78
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 9StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Bouncycastle | Bouncy Castle for Java | n/a |
| ||||||
| NetApp | Active IQ Unified Manager | n/a |
| ||||||
| NetApp | Bluexp | n/a |
| ||||||
| NetApp | Oncommand Workflow Automation | n/a |
| ||||||
| NetApp | Ontap Tools | n/a |
|
Cryostat 3 on RHEL 8
cryostat-tech-preview/cryostat-db-rhel8:3.0.0-3
Fixed · RHSA-2024:4173
Cryostat 3 on RHEL 8
cryostat-tech-preview/cryostat-grafana-dashboard-rhel8:3.0.0-2
Fixed · RHSA-2024:4173
Cryostat 3 on RHEL 8
cryostat-tech-preview/cryostat-operator-bundle:3.0.0-2
Fixed · RHSA-2024:4173
Cryostat 3 on RHEL 8
cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8:3.0.0-3
Fixed · RHSA-2024:4173
Cryostat 3 on RHEL 8
cryostat-tech-preview/cryostat-reports-rhel8:3.0.0-2
Fixed · RHSA-2024:4173
Cryostat 3 on RHEL 8
cryostat-tech-preview/cryostat-rhel8-operator:3.0.0-2
Fixed · RHSA-2024:4173
Cryostat 3 on RHEL 8
cryostat-tech-preview/cryostat-rhel8:3.0.0-2
Fixed · RHSA-2024:4173
Cryostat 3 on RHEL 8
cryostat-tech-preview/cryostat-storage-rhel8:3.0.0-3
Fixed · RHSA-2024:4173
Cryostat 3 on RHEL 8
cryostat-tech-preview/jfr-datasource-rhel8:3.0.0-2
Fixed · RHSA-2024:4173
Red Hat AMQ Broker 7
org.bouncycastle-bcprov-jdk18on
Fixed · RHSA-2024:4271
Red Hat Build of Apache Camel 4.4 for Quarkus 3.8
n/a
Fixed · RHSA-2024:4505
Red Hat JBoss Enterprise Application Platform
org.bouncycastle/bcprov-jdk18on:1.78.1.redhat-00002
Fixed · RHSA-2024:5147
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
eap7-bouncycastle-0:1.78.1-1.redhat_00002.1.el8eap
Fixed · RHSA-2024:5144
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
eap7-bouncycastle-0:1.78.1-1.redhat_00002.1.el9eap
Fixed · RHSA-2024:5145
Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
eap7-bouncycastle-0:1.78.1-1.redhat_00002.1.el7eap
Fixed · RHSA-2024:5143
Red Hat JBoss Enterprise Application Platform 8
org.bouncycastle-bcprov-jdk18on
Fixed · RHSA-2024:5482
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
eap8-bouncycastle-0:1.78.1-1.redhat_00001.1.el8eap
Fixed · RHSA-2024:5479
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-activemq-artemis-0:2.21.0-5.redhat_00052.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-angus-0:2.0.3-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-angus-activation-0:2.0.1-3.redhat_00006.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-apache-commons-beanutils-0:1.9.4-13.redhat_00004.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-apache-commons-cli-0:1.4.0-2.redhat_00003.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-apache-commons-codec-0:1.15.0-6.redhat_00016.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-apache-cxf-0:4.0.4-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-apache-cxf-xjc-utils-0:4.0.0-5.redhat_00003.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-apache-mime4j-0:0.8.11-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-apache-sshd-0:2.12.1-2.redhat_00002.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-bouncycastle-0:1.78.1-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-byte-buddy-0:1.14.18-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-caffeine-0:3.1.8-2.redhat_00002.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-eap-product-conf-parent-0:800.3.0-2.GA_redhat_00004.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-guava-failureaccess-0:1.0.2-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-guava-libraries-0:33.0.0-1.jre_redhat_00002.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-hal-console-0:3.6.19-1.Final_redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-hornetq-0:2.4.9-4.Final_redhat_00002.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-httpcomponents-asyncclient-0:4.1.5-3.redhat_00005.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-httpcomponents-client-0:4.5.14-4.redhat_00012.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-httpcomponents-core-0:4.4.16-4.redhat_00010.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-infinispan-0:14.0.30-2.Final_redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jakarta-json-api-0:2.1.3-1.redhat_00002.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jakarta-mail-0:2.1.3-1.redhat_00002.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jakarta-servlet-api-0:6.0.0-5.redhat_00006.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jakarta-websocket-0:2.1.1-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jakarta-xml-bind-api-0:4.0.1-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jandex-0:3.0.8-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jasypt-0:1.9.3-4.redhat_00004.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-java-classmate-0:1.5.1-3.redhat_00004.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jaxb-0:4.0.5-2.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jboss-metadata-0:16.0.0-3.Final_redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jboss-openjdk-orb-0:10.1.0-1.Final_redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jbossws-cxf-0:7.1.0-1.Final_redhat_00002.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-joda-time-0:2.12.7-1.redhat_00002.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-jsf-impl-0:4.0.7-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-mod_cluster-0:2.0.3-1.Final_redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-neethi-0:3.2.0-1.redhat_00004.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-netty-0:4.1.108-1.Final_redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-netty-transport-native-epoll-0:4.1.108-1.Final_redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-netty-xnio-transport-0:0.1.10-1.Final_redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-opensaml-0:4.2.0-4.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-parsson-0:1.1.5-2.redhat_00002.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-reactivex-rxjava-0:3.1.8-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-resteasy-0:6.2.7-2.Final_redhat_00002.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-slf4j-0:2.0.13-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-stax2-api-0:4.2.2-1.redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-velocity-0:2.3.0-3.redhat_00009.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-weld-core-0:5.1.2-2.Final_redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-wildfly-0:8.0.3-9.GA_redhat_00004.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-wildfly-discovery-0:1.3.0-1.Final_redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-wildfly-elytron-0:2.2.6-1.Final_redhat_00001.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-wsdl4j-0:1.6.3-5.redhat_00008.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-wss4j-0:3.0.3-1.redhat_00008.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-xml-security-0:3.0.4-1.redhat_00005.1.el9eap
Fixed · RHSA-2024:5481
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
eap8-yasson-0:3.0.3-3.redhat_00002.1.el9eap
Fixed · RHSA-2024:5481
Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2
org.bouncycastle-bcprov-jdk18on
Fixed · RHSA-2024:4884
Red Hat build of Quarkus 3.8.5.redhat
org.bouncycastle/bcprov-jdk18on:1.78.1.redhat-00002
Fixed · RHSA-2024:4326
Cryostat 2
org.bouncycastle-bcprov-jdk18on
Affected
Red Hat Build of Keycloak
org.bouncycastle-bcprov-jdk18on
Affected
Red Hat Data Grid 8
org.bouncycastle-bcprov-jdk18on
Not affected
Red Hat Fuse 7
org.bouncycastle-bcprov-jdk18on
Affected
Red Hat JBoss Enterprise Application Platform Expansion Pack
org.bouncycastle-bcprov-jdk18on
Not affected
Red Hat build of Apache Camel 4 for Quarkus 3
org.bouncycastle-bcprov-jdk18on
Affected
Red Hat build of Apache Camel for Spring Boot 3
org.bouncycastle-bcprov-jdk18on
Out of support scope
Red Hat build of Quarkus
bcprov-jdk18on
Not affected
Red Hat build of Quarkus
bcprov-jdk18on
Not affected
streams for Apache Kafka
org.bouncycastle-bcprov-jdk18on
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-db-rhel8:3.0.0-3 | Fixed | RHSA-2024:4173 |
| Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-grafana-dashboard-rhel8:3.0.0-2 | Fixed | RHSA-2024:4173 |
| Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-operator-bundle:3.0.0-2 | Fixed | RHSA-2024:4173 |
| Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8:3.0.0-3 | Fixed | RHSA-2024:4173 |
| Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-reports-rhel8:3.0.0-2 | Fixed | RHSA-2024:4173 |
| Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-rhel8-operator:3.0.0-2 | Fixed | RHSA-2024:4173 |
| Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-rhel8:3.0.0-2 | Fixed | RHSA-2024:4173 |
| Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-storage-rhel8:3.0.0-3 | Fixed | RHSA-2024:4173 |
| Cryostat 3 on RHEL 8 | cryostat-tech-preview/jfr-datasource-rhel8:3.0.0-2 | Fixed | RHSA-2024:4173 |
| Red Hat AMQ Broker 7 | org.bouncycastle-bcprov-jdk18on | Fixed | RHSA-2024:4271 |
| Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 | n/a | Fixed | RHSA-2024:4505 |
| Red Hat JBoss Enterprise Application Platform | org.bouncycastle/bcprov-jdk18on:1.78.1.redhat-00002 | Fixed | RHSA-2024:5147 |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | eap7-bouncycastle-0:1.78.1-1.redhat_00002.1.el8eap | Fixed | RHSA-2024:5144 |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | eap7-bouncycastle-0:1.78.1-1.redhat_00002.1.el9eap | Fixed | RHSA-2024:5145 |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | eap7-bouncycastle-0:1.78.1-1.redhat_00002.1.el7eap | Fixed | RHSA-2024:5143 |
| Red Hat JBoss Enterprise Application Platform 8 | org.bouncycastle-bcprov-jdk18on | Fixed | RHSA-2024:5482 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | eap8-bouncycastle-0:1.78.1-1.redhat_00001.1.el8eap | Fixed | RHSA-2024:5479 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-activemq-artemis-0:2.21.0-5.redhat_00052.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-angus-0:2.0.3-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-angus-activation-0:2.0.1-3.redhat_00006.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-apache-commons-beanutils-0:1.9.4-13.redhat_00004.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-apache-commons-cli-0:1.4.0-2.redhat_00003.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-apache-commons-codec-0:1.15.0-6.redhat_00016.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-apache-cxf-0:4.0.4-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-apache-cxf-xjc-utils-0:4.0.0-5.redhat_00003.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-apache-mime4j-0:0.8.11-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-apache-sshd-0:2.12.1-2.redhat_00002.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-bouncycastle-0:1.78.1-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-byte-buddy-0:1.14.18-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-caffeine-0:3.1.8-2.redhat_00002.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-eap-product-conf-parent-0:800.3.0-2.GA_redhat_00004.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-guava-failureaccess-0:1.0.2-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-guava-libraries-0:33.0.0-1.jre_redhat_00002.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-hal-console-0:3.6.19-1.Final_redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-hornetq-0:2.4.9-4.Final_redhat_00002.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-httpcomponents-asyncclient-0:4.1.5-3.redhat_00005.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-httpcomponents-client-0:4.5.14-4.redhat_00012.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-httpcomponents-core-0:4.4.16-4.redhat_00010.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-infinispan-0:14.0.30-2.Final_redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jakarta-json-api-0:2.1.3-1.redhat_00002.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jakarta-mail-0:2.1.3-1.redhat_00002.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jakarta-servlet-api-0:6.0.0-5.redhat_00006.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jakarta-websocket-0:2.1.1-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jakarta-xml-bind-api-0:4.0.1-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jandex-0:3.0.8-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jasypt-0:1.9.3-4.redhat_00004.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-java-classmate-0:1.5.1-3.redhat_00004.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jaxb-0:4.0.5-2.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jboss-metadata-0:16.0.0-3.Final_redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jboss-openjdk-orb-0:10.1.0-1.Final_redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jbossws-cxf-0:7.1.0-1.Final_redhat_00002.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-joda-time-0:2.12.7-1.redhat_00002.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-jsf-impl-0:4.0.7-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-mod_cluster-0:2.0.3-1.Final_redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-neethi-0:3.2.0-1.redhat_00004.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-netty-0:4.1.108-1.Final_redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-netty-transport-native-epoll-0:4.1.108-1.Final_redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-netty-xnio-transport-0:0.1.10-1.Final_redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-opensaml-0:4.2.0-4.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-parsson-0:1.1.5-2.redhat_00002.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-reactivex-rxjava-0:3.1.8-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-resteasy-0:6.2.7-2.Final_redhat_00002.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-slf4j-0:2.0.13-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-stax2-api-0:4.2.2-1.redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-velocity-0:2.3.0-3.redhat_00009.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-weld-core-0:5.1.2-2.Final_redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-wildfly-0:8.0.3-9.GA_redhat_00004.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-wildfly-discovery-0:1.3.0-1.Final_redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-wildfly-elytron-0:2.2.6-1.Final_redhat_00001.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-wsdl4j-0:1.6.3-5.redhat_00008.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-wss4j-0:3.0.3-1.redhat_00008.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-xml-security-0:3.0.4-1.redhat_00005.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | eap8-yasson-0:3.0.3-3.redhat_00002.1.el9eap | Fixed | RHSA-2024:5481 |
| Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2 | org.bouncycastle-bcprov-jdk18on | Fixed | RHSA-2024:4884 |
| Red Hat build of Quarkus 3.8.5.redhat | org.bouncycastle/bcprov-jdk18on:1.78.1.redhat-00002 | Fixed | RHSA-2024:4326 |
| Cryostat 2 | org.bouncycastle-bcprov-jdk18on | Affected | n/a |
| Red Hat Build of Keycloak | org.bouncycastle-bcprov-jdk18on | Affected | n/a |
| Red Hat Data Grid 8 | org.bouncycastle-bcprov-jdk18on | Not affected | n/a |
| Red Hat Fuse 7 | org.bouncycastle-bcprov-jdk18on | Affected | n/a |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | org.bouncycastle-bcprov-jdk18on | Not affected | n/a |
| Red Hat build of Apache Camel 4 for Quarkus 3 | org.bouncycastle-bcprov-jdk18on | Affected | n/a |
| Red Hat build of Apache Camel for Spring Boot 3 | org.bouncycastle-bcprov-jdk18on | Out of support scope | n/a |
| Red Hat build of Quarkus | bcprov-jdk18on | Not affected | n/a |
| Red Hat build of Quarkus | bcprov-jdk18on | Not affected | n/a |
| streams for Apache Kafka | org.bouncycastle-bcprov-jdk18on | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
NoTechnical Impact
PartialDecision
n/aAssessed Aug 19, 2024 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2024–2026- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (5 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.90% (0.00901) | 58.25th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.90% (0.00901) | 54.85th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.31% (0.00313) | 52.22th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.04% (0.00045) | 17.70th | v3 (v2023.03.01) |
| Jun 15, 2024 | 0.04% (0.00045) | 15.49th | v3 (v2023.03.01) |
References (13)
- https://access.redhat.com/security/cve/CVE-2024-30171 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2276360 Issue Tracking
- https://github.com/advisories/GHSA-v435-xc8x-wvr9 Advisory
- https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217
- https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171
- https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0
- https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171
- https://nvd.nist.gov/vuln/detail/CVE-2024-30171
- https://people.redhat.com/~hkario/marvin/
- https://security.netapp.com/advisory/ntap-20240614-0008
- https://www.bouncycastle.org/latest_releases.html
- https://www.cve.org/CVERecord?id=CVE-2024-30171
Change history (0)
No recorded changes yet.