Advisories · Technology
Legion of the Bouncy Castle Inc. BC-FJA.
Every CVE that names Legion of the Bouncy Castle Inc. BC-FJA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
- CVSS 8.7 High
PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Weak cryptography or TLS
- CVSS 6.9 Medium
CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-FJA
- CWE-697
- CVSS 8.2 High
OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-345
- CWE-354
- CVSS 5.3 Medium
Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 5.3 Medium
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 8.7 High
OpenPGP AEAD decryption skips final tag on chunk-aligned data
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
- CVSS 8.7 High
CMS AuthEnvelopedData fails to enforce tag-length on decryption
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
- CVSS 8.7 High
Possible OOM from unbounded up-front allocation on a definite-length read
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 8.7 High
Quadratic-time escaping when stringifying X.500 distinguished names
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 8.7 High
HSS public-key level count unbounded, enabling huge allocation on verify
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 8.7 High
CCM-family modes write plaintext to caller buffer before tag check
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
- CVSS 9.3 CriticalCritical · CVSS 9+
Stapled OCSP response accepted without binding to the checked certificate
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Weak cryptography or TLS
- CVSS 5.3 Medium
BCFKS keystore load honours unbounded KDF cost from untrusted file
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 9.3 CriticalCritical · CVSS 9+
JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Weak cryptography or TLS
- CVSS 8.7 High
CMS verifySignatures returns true for SignedData with zero signers
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Weak cryptography or TLS
- CVSS 8.7 High
OpenPGP CFB quick-check oracle active on symmetric/session-key paths
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Information disclosure
- CVSS 8.7 High
S/MIME validator trusts signer-asserted signingTime for path validation
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-345
- CVSS 8.7 High
CMS AuthenticatedData content not bound to MAC when authAttrs present
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
- CVSS 8.7 High
OpenPGP inline-signature policy failures silently ignored
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-FJA
- Weak cryptography or TLS
- CVSS 8.7 High
OER parser recurses without depth limit on self-referential IEEE 1609.2 schema
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 8.7 High
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 6.9 Medium
CRMF/CMP password-MAC honours unbounded iteration count
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 6.9 Medium
OpenPGP Argon2 S2K honours attacker-chosen memory and passes
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 8.7 High
OpenPGP user-attribute subpacket length bounded only by JVM max memory
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
- CVSS 5.3 Medium
PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service