DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Bouncy Castle: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-08-02
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Bouncy Castle ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
01
beschreibt (32)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-14682US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12,… | ||||
| CVE-2026-13586US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy… | ||||
| CVE-2026-13506US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle… | ||||
| CVE-2026-12860US | medium5.3 | — | ||
In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12. | ||||
| CVE-2026-12852US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check. | ||||
| CVE-2026-12817US | high8.6 | — | ||
In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy… | ||||
| CVE-2026-12816US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12. | ||||
| CVE-2026-12803US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy Castle for Java LTS bef… | ||||
| CVE-2026-12802US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bounc… | ||||
| CVE-2026-58063US | medium5.3 | — | ||
In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bo… | ||||
| CVE-2026-58062US | critical9.1 | Exploit | ||
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12,… | ||||
| CVE-2026-58061US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bo… | ||||
| CVE-2026-58060US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12,… | ||||
| CVE-2026-58059US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and B… | ||||
| CVE-2026-8763US | critical9.1 | — | ||
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy… | ||||
| CVE-2026-59652US | medium6.5 | — | ||
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper. | ||||
| CVE-2026-59651US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12. | ||||
| CVE-2026-59650US | critical9.1 | — | ||
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12. | ||||
| CVE-2026-59649US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, an… | ||||
| CVE-2026-59648US | medium5.3 | — | ||
In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy C… | ||||
20 von 32 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Red Hat Security Advisory RHSA-2026:69440 vom 2026-09-21external
- Red Hat Security Advisory RHSA-2026:69470 vom 2026-09-21external
- Red Hat Security Advisory RHSA-2026:70228 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70229 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70230 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70257 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70277 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:71675 vom 2026-09-24external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan