Denial-of-Service (DoS)

Bouncy Castle for Java FIPS BC-FJA is vulnerable to a Denial-of-Service DoS. the vulnerability is due to the JNI seeding routine repeatedly retrying the RDSEED/RDRAND CPU instructions without a limit when entropy generation fails, which allows an attacker or environmental condition causing...

PT-2026-69160

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java FIPS BC-FJA versions prior to 2.1.3 Description On Intel platforms, the native entropy source retries CPU entropy instructions without a bound. The JNI seeding routine continuously re-issues instructions as long as the...