Denial-of-Service (DoS)

Bouncy Castle for Java FIPS BC-FJA is vulnerable to a Denial-of-Service DoS. the vulnerability is due to the JNI seeding routine repeatedly retrying the RDSEED/RDRAND CPU instructions without a limit when entropy generation fails, which allows an attacker or environmental condition causing...

GHSA-V6W3-QRH8-QCCC Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound

In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...

Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound

In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...