320 matches found
CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...
CVE-2026-97873
The Bouncy Castle for Java library (before versions 1.86 and LTS 2.73.13 ) contains a vulnerability where the raw JCA provider's legacy PBES1 and PKCS#12 PBE families derive keys using an iteration count from untrusted input without bounding. An attacker could provide a small input to dictate an ...
go-pkcs12
пакет pkcs12 import "software.sslmate.com/src/go-pkcs12" Пакет pkcs12 реализует часть PKCS12 также известного как P12 или PFX. Он предназначен для декодирования DER-кодированных P12/PFX файлов для использования с пакетом crypto/tls, а также для кодирования P12/PFX файлов для использования...
PoC-CVE-2025-69421
Reproducteur de plantage uniquement pour CVE-2025-69421 Ce dépôt contient un fichier PKCS12 malformé minimal qui reproduit CVE-2025-69421 dans un environnement de laboratoire isolé. Le PFX généré contient un EncryptedData dont le EncryptedContentInfo omet le champ optionnel encryptedContent. Les...
CVE-2026-63570
Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a crafted PKCS12 file to an application that loads it and requests a key entry's certificate chain to cause a denial of service, in...
CVE-2026-63578
The bc-csharp library (versions before 2.7.0 ) by Legion of the Bouncy Castle Inc. is vulnerable to a denial of service via CPU exhaustion in the PbeUtilities.GenerateCipherParameters function. This is caused by the allocation of resources without limits during password-based private-key decrypti...
EUVD-2026-91226
Loop with unreachable exit condition in the PKCS12 key derivation Pkcs12ParametersGenerator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a PKCS12 PFX file, or a PKCS8 encrypted private key that uses a PKCS12 password-based encryption algorithm, to...
CVE-2026-63575
The Bouncy Castle Inc. bc-csharp library (versions before 2.7.0 ) is vulnerable to a Denial of Service (DoS) attack due to a loop with an unreachable exit condition in the Pkcs12ParametersGenerator component. An attacker can provide a PKCS#12 (PFX) file or a PKCS#8 encrypted private key using a P...
CVE-2026-63575 PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count
Loop with unreachable exit condition in the PKCS12 key derivation Pkcs12ParametersGenerator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a PKCS12 PFX file, or a PKCS8 encrypted private key that uses a PKCS12 password-based encryption algorithm, to...
CVE-2026-63575 PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count
Loop with unreachable exit condition in the PKCS12 key derivation Pkcs12ParametersGenerator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a PKCS12 PFX file, or a PKCS8 encrypted private key that uses a PKCS12 password-based encryption algorithm, to...
CVE-2026-63572 Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files
Allocation of resources without limits in PKCS12 keystore loading Pkcs12Store.Load in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a PKCS12 PFX file to cause a denial of service through CPU exhaustion via an iteration count close to 2^31 in the file's...
EUVD-2026-91221
Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a crafted PKCS12 file to an application that loads it and requests a key entry's certificate chain to cause a denial of service, in...
CVE-2026-63570
The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to a denial of service (DoS) via an infinite loop in Pkcs12Store.GetCertificateChain . An attacker can provide a crafted PKCS#12 file containing certificates with cyclic issuer links —such as two cert...
PT-2026-104129
Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a crafted PKCS12 file to an application that loads it and requests a key entry's certificate chain to cause a denial of service, in...
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS12 Public-Key Cryptography Standards 12 files that use Password-Based Message Authentication Code 1 PBMAC1 with short HMAC Hash-based Message Authentication Code keys. This can lead to a service accepting...
Rocky Linux 9 [CIQ] Security Update: nspr / nspr-debuginfo / nspr-devel / nss / nss-debuginfo / etc (crlsa-2023_1368)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20231368 advisory. nss: Arbitrary memory write via PKCS 12 CVE-2023-0767 Bug Fixes: In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash...
Rocky Linux 8 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc (crlsa-2026_3042)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20263042 advisory. openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS12 processing CVE-2025-69419 Tenable has extracted the preceding description block...
Rocky Linux 10.1 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (crlsa-2026_1472)
The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261472 advisory. openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS12 file CVE-2025-11187 openssl: OpenSSL: Remote code execution or...
Rocky Linux 8 [CIQ] Security Update: nss / nss-debuginfo / nss-debugsource / nss-devel / nss-softokn / etc (crlsa-2023_1252)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20231252 advisory. nss: Arbitrary memory write via PKCS 12 CVE-2023-0767 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessu...
Rocky Linux 9 [CIQ] Security Update: compat-openssl11 / compat-openssl11-debuginfo / etc (crlsa-2026_4472)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20264472 advisory. openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS12 processing CVE-2025-69419 Tenable has extracted the preceding description block...