PT-2026-104565

🗓️ 03 Oct 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 17 Views

Untrusted iteration count in Bouncy Castle for Java PBES1 and PKCS#12 families allows DoS.

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM License Metric Tool v9	30 Oct 202610:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ApplinX is vulnerable to multiple vulnerabilities due to use of Apache Log4j, FasterXML jackson-databind, FasterXML jackson-core, and Bouncy Castle libraries	14 Oct 202607:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Bouncy Castle	29 Oct 202608:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect VM Manager Tool and Scans Relay as part of IBM License Metric Tool v9 Software as a Service	30 Oct 202609:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Configuration Manager is affected by multiple Bouncy Castle and Apache MINA SSHD vulnerabilities that may cause denial of service, resource exhaustion, cryptographic verification bypass, or authentication issues.	31 Oct 202617:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Developer for i is affected by Multiple vulnerabilities	28 Oct 202615:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition	15 Oct 202607:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Bouncy Castle for Java	21 Oct 202615:04	–	ibm
CVE	CVE-2026-97873	3 Oct 202608:04	–	cve
Cvelist	CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider	3 Oct 202608:04	–	cvelist

Source	Link
bugzilla	www.bugzilla.suse.com/1284213
t	www.t.me/cveNotify/338480
bugzilla	www.bugzilla.suse.com/1284215
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2026-97873
github	www.github.com/bcgit/bc-java/commit/766a31026ac24ed3c6cad8662058ba450c338da1
osv	www.osv.dev/vulnerability/openSUSE-SU-2026:12090-1
suse	www.suse.com/security/cve/CVE-2026-71886
bugzilla	www.bugzilla.suse.com/1284222
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-97873
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2026-97873

22 Oct 2026 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 45.3

EPSS0.00263

SSVC

Bouncy Castle for Java PBES1 PKCS#12 iteration count DoS