CVE-2019-17359

Fixed in a distro release EPSS 9%

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.

Published 2019-10-08 · CVE record · OSV

Products: bouncycastle bc-java, apache tomee, netapp active_iq_unified_manager, netapp oncommand_api_services, netapp oncommand_workflow_automation, netapp service_level_manager, oracle business_process_management_suite, oracle communications_convergence, oracle communications_diameter_signaling_router, oracle communications_session_route_manager, oracle data_integrator, oracle financial_services_analytical_applications_infrastructure, oracle flexcube_private_banking, oracle hospitality_guest_access, oracle managed_file_transfer, oracle peoplesoft_enterprise_hcm_global_payroll_switzerland, oracle peoplesoft_enterprise_peopletools, oracle retail_xstore_point_of_service, oracle soa_suite, oracle webcenter_portal, oracle weblogic_server

Fixed upstream

Distro releases