CVE-2024-30172 Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
Attackers can cause a denial of service in applications using Bouncy Castle by submitting crafted Ed25519 signatures that trigger an infinite loop.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-30172?
CVE-2024-30172 is a high-severity denial of service vulnerability in n/a, published on 9 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.
Which versions are affected by CVE-2024-30172?
16 open source packages ship an affected version, including org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15to18 and org.bouncycastle:bcprov-jdk18on.
| Package | Affected | Fixed in |
|---|---|---|
org.bouncycastle:bcprov-jdk14 Maven | From 1.73 | 1.78 |
org.bouncycastle:bcprov-jdk14 Maven | From 1.73 | 1.78 |
org.bouncycastle:bcprov-jdk15to18 Maven | From 1.73 | 1.78 |
org.bouncycastle:bcprov-jdk15to18 Maven | From 1.73 | 1.78 |
org.bouncycastle:bcprov-jdk18on Maven | From 1.73 | 1.78 |
org.bouncycastle:bcprov-jdk18on Maven | From 1.73 | 1.78 |
10 more packages
org.bouncycastle:bctls-jdk14 Maven | From 1.73 | 1.78 |
org.bouncycastle:bctls-jdk14 Maven | From 1.73 | 1.78 |
org.bouncycastle:bctls-jdk15to18 Maven | From 1.73 | 1.78 |
org.bouncycastle:bctls-jdk15to18 Maven | From 1.73 | 1.78 |
org.bouncycastle:bctls-jdk18on Maven | From 1.73 | 1.78 |
org.bouncycastle:bctls-jdk18on Maven | From 1.73 | 1.78 |
BouncyCastle NuGet | All versions | None |
BouncyCastle NuGet | All versions | None |
BouncyCastle.Cryptography NuGet | All versions | 2.3.1 |
BouncyCastle.Cryptography NuGet | All versions | 2.3.1 |
How do I fix CVE-2024-30172?
Upgrade org.bouncycastle:bcprov-jdk14 to 1.78 or later.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-30172 being exploited?
There is no known exploitation of CVE-2024-30172 in the wild and no public exploit code.
Sources
Also known as CLEANSTART-2026-QI18295, DEBIAN-CVE-2024-30172, GHSA-m44j-cfrm-g8qc, ROOT-APP-MAVEN-CVE-2024-30172, UBUNTU-CVE-2024-30172.