bouncycastle vulnerabilities (openSUSE)
74 vulnerabilities.
bouncycastleopenSUSEMLS external commit can remove an arbitrary group member8.7 HighbouncycastleopenSUSEBLS12-381 key validation accepts a public key built on a foreign curve7.1 HighbouncycastleopenSUSEHQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler5.9 MediumbouncycastleopenSUSEMLS X.509 credential not bound to the LeafNode signature key9.2 CriticalbouncycastleopenSUSEOpenPGP certification accepted from a subkey without certification authority8.2 HighbouncycastleopenSUSEOpenPGP data signature accepted from a signing subkey without cross-certification8.2 HighbouncycastleopenSUSECMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent8.7 HighbouncycastleopenSUSEPKIXCertPathReviewer does not apply X.509 name constraints to the target certificate8.7 HighbouncycastleopenSUSECMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys6.9 MediumbouncycastleopenSUSEOpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check8.2 HighbouncycastleopenSUSELegacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider5.3 MediumbouncycastleopenSUSENTRU leaks private key information by reducing secret values with a non-constant-time integer division8.2 HighbouncycastleopenSUSEPassword-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points5.3 MediumbouncycastleopenSUSEMLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender8.7 HighbouncycastleopenSUSEPKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)5.3 MediumbouncycastleopenSUSELazy ASN.1 sequence forcing resets nesting-depth guard8.7 HighbouncycastleopenSUSERSA PKCS#1 verification skips last two hash bytes in NULL-omitted path8.7 HighbouncycastleopenSUSEMLS wire decoder allocates attacker-declared opaque length before bounds check8.7 HighbouncycastleopenSUSEOpenPGP AEAD decryption skips final tag on chunk-aligned data8.7 HighbouncycastleopenSUSEIESEngine stream-mode MAC forgery via length-dependent KDF split8.7 HighbouncycastleopenSUSEKCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)8.7 HighbouncycastleopenSUSECMS AuthEnvelopedData fails to enforce tag-length on decryption8.7 HighbouncycastleopenSUSEPossible OOM from unbounded up-front allocation on a definite-length read8.7 HighbouncycastleopenSUSEQuadratic-time escaping when stringifying X.500 distinguished names8.7 HighbouncycastleopenSUSEHSS public-key level count unbounded, enabling huge allocation on verify8.7 HighbouncycastleopenSUSECCM-family modes write plaintext to caller buffer before tag check8.7 HighbouncycastleopenSUSEStapled OCSP response accepted without binding to the checked certificate9.3 CriticalbouncycastleopenSUSEBCFKS keystore load honours unbounded KDF cost from untrusted file5.3 MediumbouncycastleopenSUSEJSSE hostname verifier CN-fallback enabled by default despite documented opt-in9.3 CriticalbouncycastleopenSUSECMS verifySignatures returns true for SignedData with zero signers8.7 HighbouncycastleopenSUSEOpenPGP CFB quick-check oracle active on symmetric/session-key paths8.7 HighbouncycastleopenSUSES/MIME validator trusts signer-asserted signingTime for path validation8.7 HighbouncycastleopenSUSECMS AuthenticatedData content not bound to MAC when authAttrs present8.7 HighbouncycastleopenSUSEOpenPGP inline-signature policy failures silently ignored8.7 HighbouncycastleopenSUSEMLS hash-ratchet honours arbitrary 32-bit generation counter from sender8.7 HighbouncycastleopenSUSEOER parser recurses without depth limit on self-referential IEEE 1609.2 schema8.7 HighbouncycastleopenSUSEDTLS handshake reassembler allocates buffer from unchecked 24-bit length8.7 HighbouncycastleopenSUSECRMF/CMP password-MAC honours unbounded iteration count6.9 MediumbouncycastleopenSUSEOpenPGP Argon2 S2K honours attacker-chosen memory and passes6.9 MediumbouncycastleopenSUSEOpenPGP user-attribute subpacket length bounded only by JVM max memory8.7 HighbouncycastleopenSUSEMTI/A0 DH agreement exponentiates unvalidated peer value9.3 CriticalbouncycastleopenSUSEBKS keystore accepts legacy version with 16-bit integrity MAC key7.1 HighbouncycastleopenSUSELDAP filter injection in legacy jdk1.4 LDAPStoreHelper6.9 MediumbouncycastleopenSUSEBKS/UBER keystore allocates from untrusted lengths before integrity check7.1 HighbouncycastleopenSUSEName Constraints bypass via trailing dot in rfc822Name and URI9.3 CriticalbouncycastleopenSUSEPKCS#8 / PBES2 decryptors honour unbounded KDF cost from input5.3 MediumbouncycastleopenSUSEUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.8.7 HighbouncycastleopenSUSEPKIX draft CompositeVerifier accepts empty signature sequence as valid.6.3 MediumbouncycastleopenSUSENon-constant time comparisons risk private key leakage in FrodoKEM.8.9 HighbouncycastleopenSUSELDAP Injection Vulnerability in LDAPStoreHelper.java5.5 Medium- Show olderLoading…