bouncycastle vulnerabilities (Debian)
83 vulnerabilities.
-
bouncycastleDebian MLS external commit can remove an arbitrary group member 8.7 High -
bouncycastleDebian BLS12-381 key validation accepts a public key built on a foreign curve 7.1 High -
bouncycastleDebian HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler 5.9 Medium -
bouncycastleDebian MLS X.509 credential not bound to the LeafNode signature key 9.2 Critical -
bouncycastleDebian OpenPGP certification accepted from a subkey without certification authority 8.2 High -
bouncycastleDebian OpenPGP data signature accepted from a signing subkey without cross-certification 8.2 High -
bouncycastleDebian CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent 8.7 High -
bouncycastleDebian PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate 8.7 High -
bouncycastleDebian CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys 6.9 Medium -
bouncycastleDebian OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check 8.2 High -
bouncycastleDebian Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider 5.3 Medium -
bouncycastleDebian NTRU leaks private key information by reducing secret values with a non-constant-time integer division 8.2 High -
bouncycastleDebian Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points 5.3 Medium -
bouncycastleDebian MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender 8.7 High -
bouncycastleDebian PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) 5.3 Medium -
bouncycastleDebian Lazy ASN.1 sequence forcing resets nesting-depth guard 8.7 High -
bouncycastleDebian RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path 8.7 High -
bouncycastleDebian MLS wire decoder allocates attacker-declared opaque length before bounds check 8.7 High -
bouncycastleDebian OpenPGP AEAD decryption skips final tag on chunk-aligned data 8.7 High -
bouncycastleDebian IESEngine stream-mode MAC forgery via length-dependent KDF split 8.7 High -
bouncycastleDebian KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) 8.7 High -
bouncycastleDebian CMS AuthEnvelopedData fails to enforce tag-length on decryption 8.7 High -
bouncycastleDebian Possible OOM from unbounded up-front allocation on a definite-length read 8.7 High -
bouncycastleDebian Quadratic-time escaping when stringifying X.500 distinguished names 8.7 High -
bouncycastleDebian HSS public-key level count unbounded, enabling huge allocation on verify 8.7 High -
bouncycastleDebian CCM-family modes write plaintext to caller buffer before tag check 8.7 High -
bouncycastleDebian Stapled OCSP response accepted without binding to the checked certificate 9.3 Critical -
bouncycastleDebian BCFKS keystore load honours unbounded KDF cost from untrusted file 5.3 Medium -
bouncycastleDebian JSSE hostname verifier CN-fallback enabled by default despite documented opt-in 9.3 Critical -
bouncycastleDebian CMS verifySignatures returns true for SignedData with zero signers 8.7 High -
bouncycastleDebian OpenPGP CFB quick-check oracle active on symmetric/session-key paths 8.7 High -
bouncycastleDebian S/MIME validator trusts signer-asserted signingTime for path validation 8.7 High -
bouncycastleDebian CMS AuthenticatedData content not bound to MAC when authAttrs present 8.7 High -
bouncycastleDebian OpenPGP inline-signature policy failures silently ignored 8.7 High -
bouncycastleDebian MLS hash-ratchet honours arbitrary 32-bit generation counter from sender 8.7 High -
bouncycastleDebian OER parser recurses without depth limit on self-referential IEEE 1609.2 schema 8.7 High -
bouncycastleDebian DTLS handshake reassembler allocates buffer from unchecked 24-bit length 8.7 High -
bouncycastleDebian CRMF/CMP password-MAC honours unbounded iteration count 6.9 Medium -
bouncycastleDebian OpenPGP Argon2 S2K honours attacker-chosen memory and passes 6.9 Medium -
bouncycastleDebian OpenPGP user-attribute subpacket length bounded only by JVM max memory 8.7 High -
bouncycastleDebian MTI/A0 DH agreement exponentiates unvalidated peer value 9.3 Critical -
bouncycastleDebian BKS keystore accepts legacy version with 16-bit integrity MAC key 7.1 High -
bouncycastleDebian LDAP filter injection in legacy jdk1.4 LDAPStoreHelper 6.9 Medium -
bouncycastleDebian BKS/UBER keystore allocates from untrusted lengths before integrity check 7.1 High -
bouncycastleDebian Name Constraints bypass via trailing dot in rfc822Name and URI 9.3 Critical -
bouncycastleDebian PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input 5.3 Medium -
bouncycastleDebian ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash) 8.2 High -
bouncycastleDebian Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion. 8.7 High -
bouncycastleDebian PKIX draft CompositeVerifier accepts empty signature sequence as valid. 6.3 Medium -
bouncycastleDebian Non-constant time comparisons risk private key leakage in FrodoKEM. 8.9 High - Show olderLoading…