NetSight
IP …
high7.5

CVE-2019-17359

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted …

Impact

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.

Affected products

VendorProductAffected versions
BouncycastleBc-Java
Version 1.63
ApacheTomee
Versions 7.0.7, 7.1.2, 8.0.1
NetappActive Iq Unified Manager
from 7.3
from 9.5
NetappOncommand Api Services
All versions
NetappOncommand Workflow Automation
All versions
NetappService Level Manager
All versions
OracleBusiness Process Management Suite
Versions 12.2.1.3.0, 12.2.1.4.0
OracleCommunications Convergence
from 3.0.1.0 through 3.0.2.1
OracleCommunications Diameter Signaling Router
from 8.0.0 through 8.2.2
OracleCommunications Session Route Manager
from 8.2.0 through 8.2.2
OracleData Integrator
Version 12.2.1.4.0
OracleFinancial Services Analytical Applications Infrastructure
from 8.0.6 through 8.0.9

Weakness classification

CWE-770

References