Bouncycastle

Bouncy Castle For Java

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
0

CVE-2025-9340

  • EPSS 0.02%
  • Veröffentlicht 22.08.2025 09:39:47
  • Zuletzt bearbeitet 22.08.2025 18:08:51

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules). This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Cas...

1

CVE-2025-9092

  • EPSS 0.02%
  • Veröffentlicht 16.08.2025 10:29:59
  • Zuletzt bearbeitet 18.08.2025 20:16:28

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.F...

6.3

CVE-2025-8916

  • EPSS 0.06%
  • Veröffentlicht 13.08.2025 09:31:21
  • Zuletzt bearbeitet 12.09.2025 12:15:32

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All (API modules), Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BCPKIX ...

5.9

CVE-2024-30171

  • EPSS 0.06%
  • Veröffentlicht 14.05.2024 15:21:52
  • Zuletzt bearbeitet 21.11.2024 09:11:21

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

5.5

CVE-2023-33202

Exploit
  • EPSS 0.06%
  • Veröffentlicht 23.11.2023 16:15:07
  • Zuletzt bearbeitet 18.08.2025 17:15:27

Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM encoded streams containing X.509 certificates, PKCS8 encoded keys, ...