org.bouncycastle:bctls-jdk14 vulnerabilities (TuxCare)
15 vulnerabilities.
org.bouncycastle:bctls-jdk14TuxCareLazy ASN.1 sequence forcing resets nesting-depth guard8.7 Highorg.bouncycastle:bctls-jdk14TuxCareName Constraints bypass via trailing dot in rfc822Name and URI9.3 Criticalorg.bouncycastle:bctls-jdk14TuxCareUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.8.7 Highorg.bouncycastle:bctls-jdk14TuxCarePKIX draft CompositeVerifier accepts empty signature sequence as valid.6.3 Mediumorg.bouncycastle:bctls-jdk14TuxCareNon-constant time comparisons risk private key leakage in FrodoKEM.8.9 Highorg.bouncycastle:bctls-jdk14TuxCareLDAP Injection Vulnerability in LDAPStoreHelper.java5.5 Mediumorg.bouncycastle:bctls-jdk14TuxCareGOSTCTR implementation unable to process more than 255 blocks correctly9.3 Criticalorg.bouncycastle:bctls-jdk14TuxCarePossible DOS in processing large name constraint structures in PKIXCertPathReveiwer6.3 Mediumorg.bouncycastle:bctls-jdk14TuxCarePossible DOS in processing specially formed ASN.1 Object Identifiers6.3 Mediumorg.bouncycastle:bctls-jdk14TuxCareBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Highorg.bouncycastle:bctls-jdk14TuxCareBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 Highorg.bouncycastle:bctls-jdk14TuxCareBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Mediumorg.bouncycastle:bctls-jdk14TuxCareBouncy Castle Java Cryptography API vulnerable to DNS poisoning7.5 Highorg.bouncycastle:bctls-jdk14TuxCareBouncy Castle Denial of Service (DoS)5.5 Mediumorg.bouncycastle:bctls-jdk14TuxCareIn engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm...5.5 Medium