Bouncycastle

Bouncy Castle For Java

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
0

CVE-2025-9340

  • EPSS 0.02%
  • Published 22.08.2025 09:39:47
  • Last modified 22.08.2025 18:08:51

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules). This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Cas...

1

CVE-2025-9092

  • EPSS 0.02%
  • Published 16.08.2025 10:29:59
  • Last modified 18.08.2025 20:16:28

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.F...

6.3

CVE-2025-8916

  • EPSS 0.06%
  • Published 13.08.2025 09:31:21
  • Last modified 12.09.2025 12:15:32

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All (API modules), Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BCPKIX ...

5.9

CVE-2024-30171

  • EPSS 0.06%
  • Published 14.05.2024 15:21:52
  • Last modified 21.11.2024 09:11:21

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

5.5

CVE-2023-33202

Exploit
  • EPSS 0.06%
  • Published 23.11.2023 16:15:07
  • Last modified 18.08.2025 17:15:27

Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM encoded streams containing X.509 certificates, PKCS8 encoded keys, ...