bc-java:X509CertPairParserFuzzer: Security exception in org.bouncycastle.asn1.IndefiniteLengthInputStream.read

Detailed Report: https://oss-fuzz.com/testcase?key=5223387291320320 Project: bc-java Fuzzing Engine: libFuzzer Fuzz Target: X509CertPairParserFuzzer Job Type: libfuzzerasanbc-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

bc-java-wycheproof: Wycheproof error in testLargeArrayAlias(com.google.security.wycheproof.AesGcmTest)

Detailed Report: https://oss-fuzz.com/testcase?key=4739483327397888 Project: bc-java-wycheproof Fuzzer: wycheproof Job Type: wycheproofnosanitizerbc-java-wycheproof Platform Id: linux Crash Type: Wycheproof error Crash Address: Crash State:...

bc-java:X509CertPairParserFuzzer: Security exception in org.bouncycastle.asn1.IndefiniteLengthInputStream.read

Detailed Report: https://oss-fuzz.com/testcase?key=5654983629996032 Project: bc-java Fuzzing Engine: libFuzzer Fuzz Target: X509CertPairParserFuzzer Job Type: libfuzzerasanbc-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Design/Logic Flaw

An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different...

CVE-2020-28052

CVE-2020-28052 — BC Java OpenBSDBCrypt.password check issue : In Legion of the Bouncy Castle BC Java versions 1.65 and 1.66, the OpenBSDBCrypt.checkPassword method can compare data incorrectly during password verification, causing some incorrect passwords to be treated as a match for different, p...

Memory corruption

The ASN.1 parser in Bouncy Castle Crypto aka BC Java 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64...

CVE-2019-17359

The CVE-2019-17359 entry concerns Bouncy Castle Crypto (BC Java) 1.63. The vulnerability lies in the ASN.1 parser, which can trigger a large memory allocation leading to a memory exhaustion/OutOfMemoryError via crafted ASN.1 data. Affected product: BC Java 1.63; fixed in BC Java 1.64. The issue i...