bouncycastle vulnerabilities (Ubuntu)
79 vulnerabilities.
-
bouncycastleUbuntu MLS external commit can remove an arbitrary group member 8.7 High -
bouncycastleUbuntu BLS12-381 key validation accepts a public key built on a foreign curve 7.1 High -
bouncycastleUbuntu HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler 5.9 Medium -
bouncycastleUbuntu MLS X.509 credential not bound to the LeafNode signature key 9.2 Critical -
bouncycastleUbuntu OpenPGP certification accepted from a subkey without certification authority 8.2 High -
bouncycastleUbuntu OpenPGP data signature accepted from a signing subkey without cross-certification 8.2 High -
bouncycastleUbuntu CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent 8.7 High -
bouncycastleUbuntu PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate 8.7 High -
bouncycastleUbuntu CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys 6.9 Medium -
bouncycastleUbuntu OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check 8.2 High -
bouncycastleUbuntu Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider 5.3 Medium -
bouncycastleUbuntu NTRU leaks private key information by reducing secret values with a non-constant-time integer division 8.2 High -
bouncycastleUbuntu Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points 5.3 Medium -
bouncycastleUbuntu MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender 8.7 High -
bouncycastleUbuntu Zeroisation of sensitive key material on garbage collection relies on finalization 8.7 High -
bouncycastleUbuntu Native entropy source retries the CPU entropy instructions without limit 8.7 High -
bouncycastleUbuntu PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) 5.3 Medium -
bouncycastleUbuntu Lazy ASN.1 sequence forcing resets nesting-depth guard 8.7 High -
bouncycastleUbuntu RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path 8.7 High -
bouncycastleUbuntu MLS wire decoder allocates attacker-declared opaque length before bounds check 8.7 High -
bouncycastleUbuntu OpenPGP AEAD decryption skips final tag on chunk-aligned data 8.7 High -
bouncycastleUbuntu IESEngine stream-mode MAC forgery via length-dependent KDF split 8.7 High -
bouncycastleUbuntu KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) 8.7 High -
bouncycastleUbuntu CMS AuthEnvelopedData fails to enforce tag-length on decryption 8.7 High -
bouncycastleUbuntu Possible OOM from unbounded up-front allocation on a definite-length read 8.7 High -
bouncycastleUbuntu Quadratic-time escaping when stringifying X.500 distinguished names 8.7 High -
bouncycastleUbuntu HSS public-key level count unbounded, enabling huge allocation on verify 8.7 High -
bouncycastleUbuntu CCM-family modes write plaintext to caller buffer before tag check 8.7 High -
bouncycastleUbuntu Stapled OCSP response accepted without binding to the checked certificate 9.3 Critical -
bouncycastleUbuntu BCFKS keystore load honours unbounded KDF cost from untrusted file 5.3 Medium -
bouncycastleUbuntu JSSE hostname verifier CN-fallback enabled by default despite documented opt-in 9.3 Critical -
bouncycastleUbuntu CMS verifySignatures returns true for SignedData with zero signers 8.7 High -
bouncycastleUbuntu OpenPGP CFB quick-check oracle active on symmetric/session-key paths 8.7 High -
bouncycastleUbuntu S/MIME validator trusts signer-asserted signingTime for path validation 8.7 High -
bouncycastleUbuntu CMS AuthenticatedData content not bound to MAC when authAttrs present 8.7 High -
bouncycastleUbuntu OpenPGP inline-signature policy failures silently ignored 8.7 High -
bouncycastleUbuntu MLS hash-ratchet honours arbitrary 32-bit generation counter from sender 8.7 High -
bouncycastleUbuntu OER parser recurses without depth limit on self-referential IEEE 1609.2 schema 8.7 High -
bouncycastleUbuntu DTLS handshake reassembler allocates buffer from unchecked 24-bit length 8.7 High -
bouncycastleUbuntu CRMF/CMP password-MAC honours unbounded iteration count 6.9 Medium -
bouncycastleUbuntu OpenPGP Argon2 S2K honours attacker-chosen memory and passes 6.9 Medium -
bouncycastleUbuntu OpenPGP user-attribute subpacket length bounded only by JVM max memory 8.7 High -
bouncycastleUbuntu MTI/A0 DH agreement exponentiates unvalidated peer value 9.3 Critical -
bouncycastleUbuntu BKS keystore accepts legacy version with 16-bit integrity MAC key 7.1 High -
bouncycastleUbuntu LDAP filter injection in legacy jdk1.4 LDAPStoreHelper 6.9 Medium -
bouncycastleUbuntu BKS/UBER keystore allocates from untrusted lengths before integrity check 7.1 High -
bouncycastleUbuntu Name Constraints bypass via trailing dot in rfc822Name and URI 9.3 Critical -
bouncycastleUbuntu PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input 5.3 Medium -
bouncycastleUbuntu ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash) 8.2 High -
bouncycastleUbuntu Native ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded state 1.7 Low - Show olderLoading…