eap8-bouncycastle-jmail vulnerabilities (Red Hat)
83 vulnerabilities.
eap8-bouncycastle-jmailRed HatApache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE)7.5 Higheap8-bouncycastle-jmailRed HatUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.8.7 Higheap8-bouncycastle-jmailRed HatPKIX draft CompositeVerifier accepts empty signature sequence as valid.6.3 Mediumeap8-bouncycastle-jmailRed HatNon-constant time comparisons risk private key leakage in FrodoKEM.8.9 Higheap8-bouncycastle-jmailRed HatLDAP Injection Vulnerability in LDAPStoreHelper.java5.5 Mediumeap8-bouncycastle-jmailRed HatGOSTCTR implementation unable to process more than 255 blocks correctly9.3 Criticaleap8-bouncycastle-jmailRed HatPlexus-Utils has a Directory Traversal vulnerability in its extractFile method8.8 Higheap8-bouncycastle-jmailRed HatApache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation9.3 Criticaleap8-bouncycastle-jmailRed Hatminimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions7.5 Higheap8-bouncycastle-jmailRed Hatc3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property8.9 Higheap8-bouncycastle-jmailRed Hatmchange-commons-java: Remote Code Execution via JNDI Reference Resolution8.9 Higheap8-bouncycastle-jmailRed Hatminimatch has a ReDoS via repeated wildcards with non-matching literal in pattern8.7 Higheap8-bouncycastle-jmailRed HatUndertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf9.6 Criticaleap8-bouncycastle-jmailRed HatUndertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded7.5 Higheap8-bouncycastle-jmailRed HatUndertow: undertow madeyoureset http/2 ddos vulnerability7.5 Higheap8-bouncycastle-jmailRed HatXXE vulnerability in Eclipse JGit6.8 Mediumeap8-bouncycastle-jmailRed HatOrg.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli8.1 Higheap8-bouncycastle-jmailRed HatOrg.wildfly.core:wildfly-server: wildfly improper rbac permission6.5 Mediumeap8-bouncycastle-jmailRed HatElytron-oidc-client: oidc authorization code injection4.2 Mediumeap8-bouncycastle-jmailRed Hatjose4j is vulnerable to DoS via compressed JWE content7.5 Higheap8-bouncycastle-jmailRed HatBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Higheap8-bouncycastle-jmailRed HatBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 Higheap8-bouncycastle-jmailRed HatBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Mediumeap8-bouncycastle-jmailRed HatApache CXF SSRF Vulnerability using the Aegis databinding9.3 Criticaleap8-bouncycastle-jmailRed HatNetty: Memory Leak in DNS Record Decoder via Malformed Domain Names5.3 Mediumeap8-bouncycastle-jmailRed HatNetty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service6.9 Mediumeap8-bouncycastle-jmailRed HatNetty has a Security Control Bypass via CORS Short-Circuit Failure6.5 Mediumeap8-bouncycastle-jmailRed HatNetty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion8.7 Higheap8-bouncycastle-jmailRed HatNetty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation7.5 Higheap8-bouncycastle-jmailRed HatNetty SPDY SETTINGS frame count materializes unbounded settings map7.5 Higheap8-bouncycastle-jmailRed HatNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 Higheap8-bouncycastle-jmailRed HatNetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 Higheap8-bouncycastle-jmailRed HatNetty HttpPostRequestDecoder can OOM5.3 Medium