57 matches found
ROOT-APP-MAVEN-CVE-2025-8885 CVE-2025-8885 in org.bouncycastle:bc-fips - Patched by Root
Root has patched CVE-2025-8885 in the org.bouncycastle:bc-fips package for Root:Maven. Multiple fixed versions available...
MINI-3X4X-62P4-8885
Bulletin has no description...
Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to allocation of resources without limits or throttling CVE-2025-8885
Summary Bouncy Castle is used by the IBM Datapower Operations Dashboard in their cryptographic operations Vulnerability Details CVEID:CVE-2025-8885 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules...
CGA-8885-RPPR-CF24
Bulletin has no description...
MINI-G4CP-8885-94CP
Bulletin has no description...
Security Bulletin: MongoDB Enterprised Advanced affected by: Allocation of Resources Without Limits or Throttling vulnerability (CVE-2025-8885)
Summary There is a vulnerability in bc-fips-1.0.2.5.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2025-8885. The vulnerability has/vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-8885 DESCRIPTION: Allocation of Resources Without Limits or Throttling...
Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to bc-fips
Summary IBM webMethods BPM uses bc-fips which is pulled in by webMethods Integration Server core for FIPS-compliant cryptographic operations. The BPM Process Engine relies on IS infrastructure for security but doesn't directly use Bouncy Castle APIs. Vulnerability Details CVEID:CVE-2025-8885...
Oracle GoldenGate for Big Data Resource Allocation Vulnerability 19.1.x < 19.1.0.0.21 / 21.x < 21.21.0.0.0 (October 2025 CPU)
According to its self-reported version number, the Oracle GoldenGate for Big Data application located on the remote host is affected by multiple vulnerabilities: - Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All API...
Security Bulletin: multiple vulerability in IBM Spectrum Symphony with Bouncy Castle Java API
Summary multiple vulerability in IBM Spectrum Symphony with Bouncy Castle Java TLS API Vulnerability Details CVEID:CVE-2025-8916 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the...
Security Bulletin: Due to the use of FIPS 140-2 Bouncy Castle Crypto package, IBM EntireX is vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability (CVE-2025-8885).
Summary Due to the use of FIPS 140-2 Bouncy Castle Crypto package, IBM EntireX is vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability CVE-2025-8885. The FIPS 140-2 Bouncy Castle Crypto package has been updated in order to address the vulnerability. Vulnerability...
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Allocation of Resources Without Limits or Throttling due to Bouncy Castle(CVE-2025-8916 & CVE-2025-8885)
Summary IBM App Connect Enterprise runtime and IBM Integration Bus for z/OS are vulnerable to Allocation of Resources Without Limits or Throttling due to Bouncy Castle. Vulnerability Details CVEID:CVE-2025-8916 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in...
Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector
Summary Multiple vulnerabilities were addressed in IBM StreamSets Data Collector version 6.4.0. Vulnerability Details CVEID:CVE-2015-5262 DESCRIPTION: http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setti...
CGA-8885-68C7-6Q9X
Bulletin has no description...
com.itextpdf:bouncy-castle-fips-adapter (>=9.0.0, <=9.5.0), org.apache.camel.springboot:camel-opensearch-starter (4.12.0) +13 more potentially affected by CVE-2025-8885 via org.bouncycastle:bc-fips (2.0.0)
org.bouncycastle:bc-fips MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bc-fips and may be impacted: - com.itextpdf:bouncy-castle-fips-adapter =9.0.0, =3.22.0, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1,...
app.cash.lilbitcoinj:lilbitcoinj-core (>=0.0.2, <=0.0.3), app.cash.lninvoice:ln-invoice (>=0.0.1, <=0.0.6) +1354 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-jdk15to18 (>=1.63, <=1.77)
org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.63, =0.0.2, =0.0.1, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =1.0.0, =1.0.1-rc14, =0.2.0, =0.2.0, =1.0.0.release, =1.0.20.release - cn.hermesdi:api-crypto-spring-boot-starter 1.0.0 and more Source cves: CVE-2025-8885 Source advisory: OSV:GHSA-67MF-3CR5-8W...
cn.ponfee:commons-core (>=1.1, <=1.4), de.fraunhofer.iem:cryptoanalysis (>=2.8.1, <=3.1.1) +19 more potentially affected by CVE-2025-8885 via org.bouncycastle:bctls-jdk18on (>=1.71, <=1.77)
org.bouncycastle:bctls-jdk18on MAVEN version =1.71, =1.1, =2.8.1, =2.8.1, =1.0.3, =1.0.0, =1.0.0, =1.1.1, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.2.1, =1.0.0, =2.1.3, =1.2.1, =3.0.3 and more Source cves: CVE-2025-8885 Source advisory: OSV:GHSA-67MF-3CR5-8W23...
br.net.woodstock.rockframework:rockframework-core (>=1.2.1, <=1.2.2), ca.denisab85:tn5250j (1.0.0) +127 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-jdk14 (>=1.38, <=1.77)
org.bouncycastle:bcprov-jdk14 MAVEN version =1.38, =1.2.1, =1.3.5, =1.3.5, =2.0, =1.0, =1.6.1.p24, =1.7, =0.0.1, =1.0, =1.1 - com.github.lkkushan101.restassuredpdfreport:com.github.lkkushan101.restassuredpdfreport 1.00 and more Source cves: CVE-2025-8885 Source advisory: OSV:GHSA-67MF-3CR5-8W23...
com.appmattus.certificatetransparency:certificatetransparency (>=0.3.0, <=1.1.1), com.appmattus.certificatetransparency:certificatetransparency-android (>=0.3.0, <=1.1.1) +27 more potentially affected by CVE-2025-8885 via org.bouncycastle:bctls-jdk15to18 (>=1.66, <=1.70)
org.bouncycastle:bctls-jdk15to18 MAVEN version =1.66, =0.3.0, =0.3.0, =2.0.0, =1.0.0, =1.0.0, =5.23.1, =3.8.1, =1.9.1, =1.0.0-local, =1.0.0, =2.15.1, =1.0.2, =1.8.1, =1.8.6 and more Source cves: CVE-2025-8885 Source advisory: GHSA-67MF-3CR5-8W23...
CVE-2025-8885
creationtimestamp| type| source ---|---|--- 2025-08-12 12:08:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw7bnh4j4r2s 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875 2026-02-20 14:25:07+00:00| seen|...
CVE-2025-8885
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerability is associated with program files...