| Package | Affected versions | Patched versions |
|---|---|---|
| org.bouncycastle:bcpkix-fips | ≥ 1.0.0, < 1.0.8≥ 2.0.0, < 2.0.8 | 1.0.82.0.8 |
| org.bouncycastle:bcpkix-jdk15on | ≥ 1.44, < 1.79 | 1.79 |
| org.bouncycastle:bcpkix-jdk15to18 | ≥ 1.44, < 1.79 | 1.79 |
| org.bouncycastle:bcpkix-jdk18on | ≥ 1.44, < 1.79 | 1.79 |
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files https://github.Com/bcgit/bc-java/blob/main/pkix/src/main/java/org/bouncycastle/pkix/jcajce/PKIXCertP... https://github.Com/bcgit/bc-java/blob/main/pkix/src/main/java/org/bouncycastle/pkix/jcajce/PKIXCertPathReviewer.java , https://github.Com/bcgit/bc-java/blob/main/prov/src/main/java/org/bouncycastle/x509/PKIXCertPathRevi... https://github.Com/bcgit/bc-java/blob/main/prov/src/main/java/org/bouncycastle/x509/PKIXCertPathReviewer.java .
This issue affects Bouncy Castle for Java: from BC 1.44 through 1.78, from BCPKIX FIPS 1.0.0 through 1.0.7, from BCPKIX FIPS 2.0.0 through 2.0.7.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free