Vulnerabilidades em Legion of the Bouncy Castle Inc.
85 resultadosAnálise Vexday
A Legion of the Bouncy Castle Inc. apresenta 13 vulnerabilidades catalogadas, com apenas 1 crítica e nenhuma sob ataque ativo no momento. A fraqueza dominante (CWE-400: Uncontrolled Resource Consumption) sugere problemas de negação de serviço, e o ritmo recente de 2 publicações em 90 dias indica atividade contínua de descoberta, mas sem pressão imediata de exploração em campo.
CVE-2026-103604HIGHQuadratic-time escaping when converting X.509 distinguished names to stringsEPSS 0.3%CVE-2026-59642HIGHCMS AuthenticatedData content not bound to MAC when authAttrs presentEPSS 0.3%CVE-2026-63573HIGHBleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrapEPSS 0.3%CVE-2026-103601HIGHCcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag checkEPSS 0.3%CVE-2026-59652MEDIUMLDAP filter injection in legacy jdk1.4 LDAPStoreHelperEPSS 0.3%CVE-2026-12185HIGHBKS/UBER keystore allocates from untrusted lengths before integrity checkEPSS 0.3%CVE-2026-58061HIGHCCM-family modes write plaintext to caller buffer before tag checkEPSS 0.3%CVE-2026-18036HIGHNTRU leaks private key information by reducing secret values with a non-constant-time integer divisionEPSS 0.3%CVE-2026-97873MEDIUMLegacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA providerEPSS 0.3%CVE-2026-71884HIGHPacket CTR reports a full success length after the counter is exhaustedEPSS 0.3%CVE-2026-71883HIGHNative AES packet cipher returns the raw AES key on an aliasEPSS 0.3%CVE-2026-71890HIGHMLS external commit can remove an arbitrary group memberEPSS 0.2%CVE-2026-59639HIGHCMS verifySignatures returns true for SignedData with zero signersEPSS 0.2%CVE-2026-59643HIGHOpenPGP inline-signature policy failures silently ignoredEPSS 0.2%CVE-2026-12803HIGHKCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)EPSS 0.2%CVE-2026-103602HIGHName constraints bypass via trailing dot in rfc822Name, dNSName and URI hostsEPSS 0.2%CVE-2026-63570HIGHPkcs12Store.GetCertificateChain loops forever on cyclic issuer linksEPSS 0.2%CVE-2026-16000HIGHKCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is usedEPSS 0.2%CVE-2026-63575HIGHPKCS#12 key derivation loops about 2^32 times on a zero or negative iteration countEPSS 0.2%CVE-2026-15999HIGHAES-CCM decryption accepts zero or out-of-range tag length, bypassing authenticationEPSS 0.2%