Advisories · Technology
Legion of the Bouncy Castle Inc. bc-csharp.
Every CVE that names Legion of the Bouncy Castle Inc. bc-csharp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Quadratic-time escaping when converting X.509 distinguished names to strings
- Legion of the Bouncy Castle Inc. bc-csharp
- Denial of service
- CVSS 8.7 High
Unbounded HSS public key level count allows huge array allocation during signature verification
- Legion of the Bouncy Castle Inc. bc-csharp
- Denial of service
- CVSS 8.2 High
Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts
- Legion of the Bouncy Castle Inc. bc-csharp
- Weak cryptography or TLS
- CVSS 8.2 High
CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check
- Legion of the Bouncy Castle Inc. bc-csharp
- CWE-354
- CVSS 8.7 High
Unbounded ASN.1 nesting depth causes process-terminating stack overflow
- Legion of the Bouncy Castle Inc. bc-csharp
- Denial of service
- CVSS 7.1 High
Unbounded PBE iteration count when decrypting PKCS#8 private keys
- Legion of the Bouncy Castle Inc. bc-csharp
- Denial of service
- CVSS 8.2 High
Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix
- Legion of the Bouncy Castle Inc. bc-csharp
- Weak cryptography or TLS
- CVSS 8.2 High
URI name constraints checked against a mis-parsed host
- Legion of the Bouncy Castle Inc. bc-csharp
- Weak cryptography or TLS
- CVSS 7.1 High
PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count
- Legion of the Bouncy Castle Inc. bc-csharp
- Denial of service
- CVSS 8.7 High
Unbounded allocation from OpenPGP signature and user attribute subpacket lengths
- Legion of the Bouncy Castle Inc. bc-csharp
- Denial of service
- CVSS 8.2 High
Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap
- Legion of the Bouncy Castle Inc. bc-csharp
- Information disclosure
- CVSS 7.1 High
Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files
- Legion of the Bouncy Castle Inc. bc-csharp
- Denial of service
- CVSS 8.7 High
Attribute certificate path validation does not verify the attribute certificate's signature
- Legion of the Bouncy Castle Inc. bc-csharp
- Weak cryptography or TLS
- CVSS 7.1 High
Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links
- Legion of the Bouncy Castle Inc. bc-csharp
- Denial of service
- CVSS 9.1 CriticalCritical · CVSS 9+
MTI/A0 DHAgreement does not validate the peer's ephemeral value
- Legion of the Bouncy Castle Inc. bc-csharp
- CWE-20
- CVSS 8.7 High
Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion
- Legion of the Bouncy Castle Inc. bc-csharp
- Denial of service
- CVSS 8.2 High
IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)
- Legion of the Bouncy Castle Inc. bc-csharp
- Information disclosure
- CVSS 8.7 High
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
- Legion of the Bouncy Castle Inc. bc-csharp
- Denial of service
- CVSS 8.2 High
IesEngine stream-mode MAC forgery via length-dependent KDF split
- Legion of the Bouncy Castle Inc. bc-csharp
- CWE-354
- CVSS 8.7 High
KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used
- Legion of the Bouncy Castle Inc. bc-csharp
- CWE-325
- CVSS 8.2 High
AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication
- Legion of the Bouncy Castle Inc. bc-csharp
- CWE-354