Към съдържанието
Търсене

CVE-2025-14813: Legion of the Bouncy Castle Inc. BC-JAVA, слаба

9.3

CVSS 4.0

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

Засегнати продукти

  • Legion of the Bouncy Castle Inc. BC-JAVA: 1.59 преди 1.80.2; 1.81 преди 1.81.1; 1.82 преди 1.84
  • Red Hat: още 46 продукта, добавени от Red Hat

    Red Hat AMQ Broker 7.12.7, Red Hat AMQ Broker 7.13.5, Red Hat AMQ Broker 7.14.1, Red Hat Build of Apache Camel 4.14 for Quarkus 3.27, Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14, Red Hat build of Quarkus 3.20.6.SP1, Red Hat build of Quarkus 3.27.3.SP1, Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7, Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8, Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9, Red Hat JBoss Enterprise Application Platform 8.1.7.GA, Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8, Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9, OpenShift Developer Tools and Services 4.12, OpenShift Developer Tools and Services 4.13, OpenShift Developer Tools and Services 4.14, OpenShift Developer Tools and Services 4.15, OpenShift Developer Tools and Services 4.16, OpenShift Developer Tools and Services 4.17, OpenShift Developer Tools and Services 4.18, OpenShift Developer Tools and Services 4.19, OpenShift Developer Tools and Services 4.20, OpenShift Developer Tools and Services 4.21, OpenShift Developer Tools and Services 4.22, Red Hat OpenShift AI 2.25, Red Hat OpenShift Dev Spaces 3.28, Cryostat 4, OpenShift Developer Tools and Services, Red Hat AMQ Broker 7, Red Hat AMQ Clients, Red Hat build of Apache Camel 4 for Quarkus 3, Red Hat build of Apicurio Registry 3, Red Hat build of Debezium 3, Red Hat Build of Keycloak, Red Hat Data Grid 8, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Fuse 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat OpenShift AI (RHOAI), Red Hat Process Automation 7, Red Hat Satellite 6, Red Hat Single Sign-On 7, streams for Apache Kafka 2, streams for Apache Kafka 3

Вид слабост

История

  • 15 април 2026 Публикувано

Други уязвимости в Legion of the Bouncy Castle Inc. BC-JAVA

Първоизточници

CVE-2025-14813: Legion of the Bouncy Castle Inc. BC-JAVA, слаба | freedomonline.bg