CVE-2019-17359

—

CVSS 3.1

7.5 high

EPSS

9%p95

Published

Oct 8, 2019 (Oct 8, 2019)

Modified

Jun 17, 2026

Description

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.

Vendors: bouncycastle apache netapp oracle
Products: bc-java, tomee, active iq unified manager, oncommand api services, oncommand workflow automation, service level manager, business process management suite, communications convergence, communications diameter signaling router, communications session route manager, data integrator, financial services analytical applications infrastructure
Weakness: CWE-770
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (8.9%)

In the news0 stories

No ingested article mentions this CVE yet.