CVE-2025-11187

CVE-2025-11187 Stack buffer overflow in PKCS12 PBMAC1 PBKDF2 keylength OpenSSL 3.X Found this stack buffer overflow like a year ago, turned out to be a duplicate CVE-2025-11187 issue occurs in libcrypto's PKCS PBMAC1 handling when PBKDF2's keylength is attacker-controlled, It causes a write past ...

Security Bulletin:Vulnerability in bcpkix-jdk18on may affect IBM Infosphere Change Data Capture (CVE-2026-17508)

Summary A security vulnerability has been identified in bcpkix-jdk18on, The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. bcpkix-jdk18on is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the...

Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Bouncy Castle for Java

Summary IBM SPSS Modeler is affected by vulnerabilities in Bouncy Castle for Java. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-17508 DESCRIPTION: In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with...

openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS12 Public-Key Cryptography Standards 12 files that use Password-Based Message Authentication Code 1 PBMAC1 with short HMAC Hash-based Message Authentication Code keys. This can lead to a service accepting...

SUSE CVE-2026-17508

In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unbounded PBKDF2 parameters in the PBMAC1 key-derivation path in JcePBMac1CalculatorBuilder and PKCS12PBEUtils.createPBMac1Calculator. An attacker can force excessive PBKDF2 wo...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unbounded PBKDF2 parameters in the PBMAC1 key-derivation path in JcePBMac1CalculatorBuilder and PKCS12PBEUtils.createPBMac1Calculator. An attacker can force excessive PBKDF2 wo...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unbounded PBKDF2 parameters in the PBMAC1 key-derivation path in JcePBMac1CalculatorBuilder and PKCS12PBEUtils.createPBMac1Calculator. An attacker can force excessive PBKDF2 wo...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unbounded PBKDF2 parameters in the PBMAC1 key-derivation path in JcePBMac1CalculatorBuilder and PKCS12PBEUtils.createPBMac1Calculator. An attacker can force excessive PBKDF2 wo...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unbounded PBKDF2 parameters in the PBMAC1 key-derivation path in JcePBMac1CalculatorBuilder and PKCS12PBEUtils.createPBMac1Calculator. An attacker can force excessive PBKDF2 wo...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unbounded PBKDF2 parameters in the PBMAC1 key-derivation path in JcePBMac1CalculatorBuilder and PKCS12PBEUtils.createPBMac1Calculator. An attacker can force excessive PBKDF2 wo...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unbounded PBKDF2 parameters in the PBMAC1 key-derivation path in JcePBMac1CalculatorBuilder and PKCS12PBEUtils.createPBMac1Calculator. An attacker can force excessive PBKDF2 wo...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unbounded PBKDF2 parameters in the PBMAC1 key-derivation path in JcePBMac1CalculatorBuilder and PKCS12PBEUtils.createPBMac1Calculator. An attacker can force excessive PBKDF2 wo...

CVE-2026-17508

In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...

CVE-2026-17508

In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...

CVE-2026-17508

In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...

CVE-2026-17508 Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points

In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...

CVE-2026-17508 Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points

In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...

EUVD-2026-91236

In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...

CVE-2026-17508

The Bouncy Castle for Java cryptographic library (versions before 1.86 , LTS before 2.73.13 , and FIPS before bcpkix-fips 1.0.13, 2.0.13, and 2.1.13) contains a vulnerability where password-based key derivation functions (KDFs) use unbounded cost parameters from untrusted input. Specifically, the...