Maven/org.bouncycastle:bcprov-debug-jdk14 CVE-2023-33201: medium 5.3, EPSS 0.77%

Bouncy Castle For Java LDAP injection vulnerability

Action: Upgrade org.bouncycastle:bcprov-debug-jdk14 to 1.74 or later.

Affected

Fixed versions

Sources

• osv: GHSA-hr8g-6v94-x4m9#Maven/org.bouncycastle:bcprov-debug-jdk14
• https://nvd.nist.gov/vuln/detail/CVE-2023-33201
• https://github.com/bcgit/bc-java/commit/ccf93ca736b89250ff4ce079a5aa56f5cbf0ebbd
• https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc
• https://bouncycastle.org
• https://bouncycastle.org/releasenotes.html#r1rv74
• https://github.com/bcgit/bc-java
• https://github.com/bcgit/bc-java/commits/main/prov/src/main/java/org/bouncycastle/jce/provider/X509LDAPCertStoreSpi.java
• https://github.com/bcgit/bc-java/wiki/CVE-2023-33201
• https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html
• https://security.netapp.com/advisory/ntap-20230824-0008

CVE-2023-33201 · published 2023-07-05T03:30:23Z · modified 2026-09-10T03:49:42.995735819Z · JSON