CVE-2024-30171

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

5.9 MediumFix available

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.90%Up 0.9 points since Jun 15, 2024

What each source reports

CVE List Score used 5.9

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Record: CVE-2024-30171
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-203
Updated: 2026-11-02

EUVDEUVD-2024-1786 5.9

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Record: EUVD-2024-1786
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-v435-xc8x-wvr9 5.9

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Record: GHSA-v435-xc8x-wvr9
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-203
Updated: 2026-11-02

NVD 5.9

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Record: CVE-2024-30171
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-203
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-30171 5.9

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Record: DEBIAN-CVE-2024-30171
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVGHSA-v435-xc8x-wvr9 5.9

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Record: GHSA-v435-xc8x-wvr9
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-203
Updated: 2026-11-02

Show 14 moreShow less

OSVRHSA-2024:5143 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update

Record: RHSA-2024:5143
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2024:5144 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update

Record: RHSA-2024:5144
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2024:5145 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update

Record: RHSA-2024:5145
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2024:5479 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.3 Security update

Record: RHSA-2024:5479
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2024:5481 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.3 Security update

Record: RHSA-2024:5481
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-APP-MAVEN-CVE-2024-30171 5.9

CVE-2024-30171 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2024-30171 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available.

Record: ROOT-APP-MAVEN-CVE-2024-30171
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-30171 5.9

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Record: UBUNTU-CVE-2024-30171
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVCLSA-2026-1769818135 No score

TuxCare security update for org.bouncycastle (5 CVEs)

TuxCare rebuilt 4 org.bouncycastle packages to address 5 CVEs. Fixed in 1.76-tuxcare.1.

Record: CLSA-2026-1769818135
Updated: 2026-11-02

OSVCLSA-2026-1781571259 No score

TuxCare security update for org.bouncycastle (3 CVEs)

TuxCare rebuilt 4 org.bouncycastle packages to address 3 CVEs. Fixed in 1.64-tuxcare.5.

Record: CLSA-2026-1781571259
Updated: 2026-11-02

OSVCLSA-2026-1791306023 No score

TuxCare security update for org.bouncycastle (7 CVEs)

TuxCare rebuilt 11 org.bouncycastle packages to address 7 CVEs. Fixed in 1.77-tuxcare.3.

Record: CLSA-2026-1791306023
Updated: 2026-11-02

OSV No score

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Record: CVE-2024-30171
Updated: 2026-11-02

OSVopenSUSE-SU-2024:13914-1 No score

bouncycastle-1.78.1-1.1 on GA media

These are all security issues fixed in the bouncycastle-1.78.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:13914-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1539-1 No score

Security update for bouncycastle

This update for bouncycastle fixes the following issues:

Update to version 1.78.1, including fixes for:

CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252)

Record: SUSE-SU-2024:1539-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1539-2 No score

Security update for bouncycastle

This update for bouncycastle fixes the following issues:

Update to version 1.78.1, including fixes for:

CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252)

Record: SUSE-SU-2024:1539-2
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`org.bouncycastle:bctls-fips` Maven	before 1.0.19	1.0.19
`org.bouncycastle:bcprov-jdk18on` Maven	before 1.78	1.78
`org.bouncycastle:bcprov-jdk15on` Maven	before 1.78	1.78
`org.bouncycastle:bcprov-jdk15to18` Maven	before 1.78	1.78
`org.bouncycastle:bcprov-jdk14` Maven	before 1.78	1.78
`org.bouncycastle:bctls-jdk18on` Maven	before 1.78	1.78
`org.bouncycastle:bctls-jdk14` Maven	before 1.78	1.78
`org.bouncycastle:bctls-jdk15to18` Maven	before 1.78	1.78
`BouncyCastle` NuGet	before 2.3.1	2.3.1
`BouncyCastle.Cryptography` NuGet	before 2.3.1	2.3.1

Show 290 moreShow less

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-30171 is a medium vulnerability (CVSS 5.9) in Bouncycastle Bouncy Castle For Java, published May 7, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 59th percentile. Fixed in org.bouncycastle:bctls-fips 1.0.19.

References

Show 115 moreShow less

This page doesn't list everything

Left out here: 322 package rows. The JSON record has them.

Affected packages
Package	Affected	Fixed
`org.bouncycastle:bcprov-jdk15to18` TuxCare:Maven From an advisory covering 5 CVEs	1.76 up to 1.76-tuxcare.1	1.76-tuxcare.1
`org.bouncycastle:bcprov-jdk18on` TuxCare:Maven From an advisory covering 5 CVEs	1.76 up to 1.76-tuxcare.1	1.76-tuxcare.1
`org.bouncycastle:bctls-jdk15to18` TuxCare:Maven From an advisory covering 5 CVEs	1.76 up to 1.76-tuxcare.1	1.76-tuxcare.1
`org.bouncycastle:bctls-jdk18on` TuxCare:Maven From an advisory covering 5 CVEs	1.76 up to 1.76-tuxcare.1	1.76-tuxcare.1
`org.bouncycastle:bcprov-ext-jdk15on` TuxCare:Maven From an advisory covering 3 CVEs	1.64 up to 1.64-tuxcare.5, plus listed versions 1.64-tuxcare.11.64-tuxcare.21.64-tuxcare.31.64-tuxcare.4	1.64-tuxcare.5
`org.bouncycastle:bcprov-jdk14` TuxCare:Maven From an advisory covering 3 CVEs	1.64 up to 1.64-tuxcare.5, plus listed versions 1.64-tuxcare.11.64-tuxcare.21.64-tuxcare.31.64-tuxcare.4	1.64-tuxcare.5
`org.bouncycastle:bcprov-jdk15on` TuxCare:Maven From an advisory covering 3 CVEs	1.64 up to 1.64-tuxcare.5, plus listed versions 1.64-tuxcare.11.64-tuxcare.21.64-tuxcare.31.64-tuxcare.4	1.64-tuxcare.5
`org.bouncycastle:bctls-jdk14` TuxCare:Maven From an advisory covering 3 CVEs	1.64 up to 1.64-tuxcare.5, plus listed versions 1.64-tuxcare.11.64-tuxcare.21.64-tuxcare.31.64-tuxcare.4	1.64-tuxcare.5
`org.bouncycastle:bcpkix-debug-jdk15to18` TuxCare:Maven From an advisory covering 7 CVEs	1.77 up to 1.77-tuxcare.3, plus listed versions 1.77-tuxcare.11.77-tuxcare.2	1.77-tuxcare.3
`org.bouncycastle:bcpkix-debug-jdk18on` TuxCare:Maven From an advisory covering 7 CVEs	1.77 up to 1.77-tuxcare.3, plus listed versions 1.77-tuxcare.11.77-tuxcare.2	1.77-tuxcare.3
`org.bouncycastle:bcpkix-jdk14` TuxCare:Maven From an advisory covering 7 CVEs	1.77 up to 1.77-tuxcare.3, plus listed versions 1.77-tuxcare.11.77-tuxcare.2	1.77-tuxcare.3
`org.bouncycastle:bcpkix-jdk15to18` TuxCare:Maven From an advisory covering 7 CVEs	1.77 up to 1.77-tuxcare.3, plus listed versions 1.77-tuxcare.11.77-tuxcare.2	1.77-tuxcare.3
`org.bouncycastle:bcpkix-jdk18on` TuxCare:Maven From an advisory covering 7 CVEs	1.77 up to 1.77-tuxcare.3, plus listed versions 1.77-tuxcare.11.77-tuxcare.2	1.77-tuxcare.3
`org.bouncycastle:bcprov-jdk14` TuxCare:Maven From an advisory covering 7 CVEs	1.77 up to 1.77-tuxcare.3, plus listed versions 1.77-tuxcare.11.77-tuxcare.2	1.77-tuxcare.3
`org.bouncycastle:bcprov-jdk15to18` TuxCare:Maven From an advisory covering 7 CVEs	1.77 up to 1.77-tuxcare.3, plus listed versions 1.77-tuxcare.11.77-tuxcare.2	1.77-tuxcare.3
`org.bouncycastle:bcprov-jdk18on` TuxCare:Maven From an advisory covering 7 CVEs	1.77 up to 1.77-tuxcare.3, plus listed versions 1.77-tuxcare.11.77-tuxcare.2	1.77-tuxcare.3
`org.bouncycastle:bctls-jdk14` TuxCare:Maven From an advisory covering 7 CVEs	1.77 up to 1.77-tuxcare.3, plus listed versions 1.77-tuxcare.11.77-tuxcare.2	1.77-tuxcare.3
`org.bouncycastle:bctls-jdk15to18` TuxCare:Maven From an advisory covering 7 CVEs	1.77 up to 1.77-tuxcare.3, plus listed versions 1.77-tuxcare.11.77-tuxcare.2	1.77-tuxcare.3
`org.bouncycastle:bctls-jdk18on` TuxCare:Maven From an advisory covering 7 CVEs	1.77 up to 1.77-tuxcare.3, plus listed versions 1.77-tuxcare.11.77-tuxcare.2	1.77-tuxcare.3
`bouncycastle` Debian:12	All versions, plus listed versions 1.72-21.77-11.80-11.80-21.80-31.86-11.86.2-1	None known
`bouncycastle` Debian:13	before 1.80-1	1.80-1
`bouncycastle` Debian:14	before 1.80-1	1.80-1
`org.bouncycastle:bctls-fips` Maven	before 1.0.19, plus listed versions 1.0.01.0.11.0.101.0.10.11.0.10.2 Show 24 moreShow less 1.0.10.31.0.111.0.11.11.0.11.21.0.11.31.0.11.41.0.121.0.12.11.0.12.21.0.12.31.0.131.0.141.0.14.11.0.161.0.171.0.181.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.9	1.0.19
`org.bouncycastle:bcprov-jdk18on` Maven	before 1.78, plus listed versions 1.711.71.11.721.731.741.751.761.77	1.78
`org.bouncycastle:bcprov-jdk15on` Maven	before 1.78, plus listed versions 1.461.471.481.491.50 Show 21 moreShow less 1.511.521.531.541.551.561.571.581.591.601.611.621.631.641.651.65.011.661.671.681.691.70	1.78
`org.bouncycastle:bcprov-jdk15to18` Maven	before 1.78, plus listed versions 1.631.641.651.661.67 Show 10 moreShow less 1.681.691.701.711.721.731.741.751.761.77	1.78
`org.bouncycastle:bcprov-jdk14` Maven	before 1.78, plus listed versions 1.381.431.441.451.46 Show 29 moreShow less 1.471.481.491.501.511.531.541.551.561.571.581.591.601.611.621.631.641.651.671.681.691.701.711.721.731.741.751.761.77	1.78
`org.bouncycastle:bctls-jdk18on` Maven	before 1.78, plus listed versions 1.711.71.11.721.731.741.751.761.77	1.78
`org.bouncycastle:bctls-jdk14` Maven	before 1.78, plus listed versions 1.611.621.631.641.65 Show 11 moreShow less 1.671.681.691.701.711.721.731.741.751.761.77	1.78
`org.bouncycastle:bctls-jdk15to18` Maven	before 1.78, plus listed versions 1.631.641.651.661.67 Show 10 moreShow less 1.681.691.701.711.721.731.741.751.761.77	1.78
`BouncyCastle` NuGet	All versions, plus listed versions 1.7.01.8.11.8.21.8.31.8.3.1 Show 5 moreShow less 1.8.41.8.51.8.61.8.6.11.8.9	None known
`BouncyCastle.Cryptography` NuGet	before 2.3.1, plus listed versions 2.0.02.1.02.1.12.2.02.2.12.3.0	2.3.1
`eap7-undertow` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs	before 0:2.2.33-1.SP1_redhat_00001.1.el7eap	0:2.2.33-1.SP1_redhat_00001.1.el7eap
`eap7-bouncycastle` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs	before 0:1.78.1-1.redhat_00002.1.el7eap	0:1.78.1-1.redhat_00002.1.el7eap
`eap7-bouncycastle-mail` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs	before 0:1.78.1-1.redhat_00002.1.el7eap	0:1.78.1-1.redhat_00002.1.el7eap
`eap7-bouncycastle-pg` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs	before 0:1.78.1-1.redhat_00002.1.el7eap	0:1.78.1-1.redhat_00002.1.el7eap
`eap7-bouncycastle-pkix` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs	before 0:1.78.1-1.redhat_00002.1.el7eap	0:1.78.1-1.redhat_00002.1.el7eap
`eap7-bouncycastle-prov` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs	before 0:1.78.1-1.redhat_00002.1.el7eap	0:1.78.1-1.redhat_00002.1.el7eap
`eap7-bouncycastle-util` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs	before 0:1.78.1-1.redhat_00002.1.el7eap	0:1.78.1-1.redhat_00002.1.el7eap
`eap7-hal-console` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs	before 0:3.3.23-1.Final_redhat_00001.1.el7eap	0:3.3.23-1.Final_redhat_00001.1.el7eap