Vulnerabilidades em Legion of the Bouncy Castle Inc.
85 resultadosAnálise Vexday
A Legion of the Bouncy Castle Inc. apresenta 13 vulnerabilidades catalogadas, com apenas 1 crítica e nenhuma sob ataque ativo no momento. A fraqueza dominante (CWE-400: Uncontrolled Resource Consumption) sugere problemas de negação de serviço, e o ritmo recente de 2 publicações em 90 dias indica atividade contínua de descoberta, mas sem pressão imediata de exploração em campo.
CVE-2026-8798HIGHNative entropy source retries the CPU entropy instructions without limitEPSS 0.4%CVE-2026-13505HIGHZeroisation of sensitive key material on garbage collection relies on finalizationEPSS 0.4%CVE-2026-63574HIGHUnbounded allocation from OpenPGP signature and user attribute subpacket lengthsEPSS 0.4%CVE-2026-59648MEDIUMOpenPGP Argon2 S2K honours attacker-chosen memory and passesEPSS 0.4%CVE-2026-59647MEDIUMCRMF/CMP password-MAC honours unbounded iteration countEPSS 0.4%CVE-2026-58063MEDIUMBCFKS keystore load honours unbounded KDF cost from untrusted fileEPSS 0.4%CVE-2026-17507HIGHMLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range senderEPSS 0.4%CVE-2026-17508MEDIUMPassword-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry pointsEPSS 0.4%CVE-2026-59645HIGHOER parser recurses without depth limit on self-referential IEEE 1609.2 schemaEPSS 0.4%CVE-2026-63572HIGHUnbounded MAC and bag-decryption iteration counts when loading PKCS#12 filesEPSS 0.4%CVE-2026-63578HIGHUnbounded PBE iteration count when decrypting PKCS#8 private keysEPSS 0.4%CVE-2026-58062CRITICALStapled OCSP response accepted without binding to the checked certificateEPSS 0.4%CVE-2026-63568HIGHUnbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustionEPSS 0.4%CVE-2026-103600HIGHUnbounded ASN.1 nesting depth causes process-terminating stack overflowEPSS 0.4%CVE-2026-59640HIGHOpenPGP CFB quick-check oracle active on symmetric/session-key pathsEPSS 0.3%CVE-2026-59638CRITICALJSSE hostname verifier CN-fallback enabled by default despite documented opt-inEPSS 0.3%CVE-2026-15055MEDIUMPKCS#8 / PBES2 decryptors honour unbounded KDF cost from inputEPSS 0.3%CVE-2026-59650CRITICALMTI/A0 DH agreement exponentiates unvalidated peer valueEPSS 0.3%CVE-2026-63569CRITICALMTI/A0 DHAgreement does not validate the peer's ephemeral valueEPSS 0.3%CVE-2025-14813CRITICALGOSTCTR implementation unable to process more than 255 blocks correctlyEPSS 0.3%