Към съдържанието
Търсене

CVE-2026-3505: Legion of the Bouncy Castle Inc. BC-JAVA, отказ на

8.7

CVSS 4.0

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java, OperatorHelper.Java. This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

Засегнати продукти

  • Legion of the Bouncy Castle Inc. BC-JAVA: 1.74 преди 1.80.2; 1.81 преди 1.81.1; 1.82 преди 1.84
  • Red Hat: още 32 продукта, добавени от Red Hat

    Red Hat Build of Apache Camel 4.14 for Quarkus 3.27, Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14, Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7, Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8, Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9, Red Hat JBoss Enterprise Application Platform 8.1.7.GA, Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8, Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9, OpenShift Developer Tools and Services 4.12, OpenShift Developer Tools and Services 4.13, OpenShift Developer Tools and Services 4.14, OpenShift Developer Tools and Services 4.15, OpenShift Developer Tools and Services 4.16, OpenShift Developer Tools and Services 4.17, OpenShift Developer Tools and Services 4.18, OpenShift Developer Tools and Services 4.19, OpenShift Developer Tools and Services 4.20, OpenShift Developer Tools and Services 4.21, OpenShift Developer Tools and Services 4.22, OpenShift Developer Tools and Services, Red Hat AMQ Clients, Red Hat build of Apache Camel 4 for Quarkus 3, Red Hat Data Grid 8, Red Hat Enterprise Linux 9, Red Hat Fuse 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat Process Automation 7, Red Hat Satellite 6, Red Hat Single Sign-On 7, streams for Apache Kafka 2, streams for Apache Kafka 3

Вид слабост

История

  • 15 април 2026 Публикувано

Други уязвимости в Legion of the Bouncy Castle Inc. BC-JAVA

Първоизточници

CVE-2026-3505: Legion of the Bouncy Castle Inc. BC-JAVA, отказ на | freedomonline.bg