An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19. When endpoint identification is enabled in the BCJSSE and an SSL socket is created without an explicit hostname (as happens with HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP address in some situations, opening up a possibility of DNS poisoning.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8108-1 advisory.

    It was discovered that Bouncy Castle did not sanitize user input when inserting it into an LDAP search     filter. An attacker could possibly use this issue to perform an LDAP injection attack. This issue only     affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2023-33201)

    It was discovered that Bouncy Castle incorrectly handled specially crafted F2m parameters in the ECCurve     algorithm. An attacker could possibly use this issue to cause Bouncy Castle to use excessive resources,     leading to a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04     LTS, and Ubuntu 24.04 LTS. (CVE-2024-29857)

    It was discovered that Bouncy Castle leaked timing information when handling exceptions during an RSA     handshake. An attacker could possibly use this issue to obtain sensitive information. This issue only     affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-30171)

    It was discovered that Bouncy Castle incorrectly handled endpoint identification with an SSL socket     enabled without an explicit hostname. An attacker could possibly use this issue to perform a DNS poisoning     attack. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS.
    (CVE-2024-34447)

    Bing Shi discovered that Bouncy Castle incorrectly handled resource memory allocation. An attacker could     possibly use this issue to cause Bouncy Castle to use excessive resources, leading to a denial of service.
    This issue only affected Ubuntu 24.04 LTS. (CVE-2025-8916)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with     BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19. When endpoint identification is     enabled in the BCJSSE and an SSL socket is created without an explicit hostname (as happens with     HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP address in some     situations, opening up a possibility of DNS poisoning. (CVE-2024-34447)

Note that Nessus relies on the presence of the package as reported by the vendor.

The 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2025 CPU advisory.

  - Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise     Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic     Server. (CVE-2024-23635)

  - Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle     WebLogic Server.  While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional     products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. (CVE-2023-7272)

  - Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle     WebLogic Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Oracle WebLogic Server. (CVE-2024-47554)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with
    BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19. When endpoint identification is
    enabled in the BCJSSE and an SSL socket is created without an explicit hostname (as happens with
    HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP address in some
    situations, opening up a possibility of DNS poisoning. (CVE-2024-34447)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-636 advisory.

    An issue was discovered in Bouncy Castle Java Cryptography APIs before ...

    NOTE: https://github.com/bcgit/bc-java/issues/1635NOTE:
    https://www.bouncycastle.org/latest_releases.htmlDEBIANBUG: [1070655] (CVE-2024-29857)

    An issue was discovered in Bouncy Castle Java Cryptography APIs before BC 1.78. When endpoint     identification is enabled in the BCJSSE and an SSL socket is created without an explicit hostname (as     happens with HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP     address in some situations, opening up a possibility of DNS poisoning. (CVE-2024-34447)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
303028	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Bouncy Castle vulnerabilities (USN-8108-1)	Nessus	Ubuntu Local Security Checks	medium
232128	Linux Distros Unpatched Vulnerability : CVE-2024-34447	Nessus	Misc.	high
214580	Oracle WebLogic Server (January 2025 CPU)	Nessus	Misc.	medium
410204	SCA: security update for org.bouncycastle:bcprov-jdk12, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bcprov-lts8on, org.bouncycastle:bctls-fips (GHSA-4h8f-2wvx-gg5w)	Tenable Cloud Security	SCA Checks	high
410204	SCA: security update for org.bouncycastle:bcprov-jdk12, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bcprov-lts8on, org.bouncycastle:bctls-fips (GHSA-4h8f-2wvx-gg5w)	Tenable Self-Hosted Container Security	SCA Checks	high
200264	Amazon Linux 2023 : bouncycastle, bouncycastle-javadoc, bouncycastle-mail (ALAS2023-2024-636)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2024-34447

high

Tenable Plugins

medium

high

medium

high

high

high