CVE-2024-30172

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.

Affected products

Bamboo, Bamboo Data Center/Server, Bitbucket, Bitbucket Data Center/Server, Confluence, Confluence Data Center/Server, Debian, Linuxmint

Fix

Available

CVSS 3.1

7.5 HIGH

EPSS

0.8% (52th percentile)

NVD status

Deferred

Published

2024-05-09