● CVE — High
CVE-2019-17359
Vendororacle, netapp, bouncycastle, apacheProductpeoplesoft enterprise peopletools, active iq unified manager, oncommand workflow automation, hospitality guest access, weblogic server, financial services analytical applications infrastructure, webcenter portal, business process management suite, communications diameter signaling router, data integrator, oncommand api services, service level manager, managed file transfer, retail xstore point of service, bc-java, flexcube private banking, soa suite, communications convergence, tomee, communications session route manager, peoplesoft enterprise hcm global payroll switzerlandDiscoveredOct 8, 2019UpdatedMay 12, 2025
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.