218 matches found
Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to bc-fips
Summary IBM webMethods BPM uses bc-fips which is pulled in by webMethods Integration Server core for FIPS-compliant cryptographic operations. The BPM Process Engine relies on IS infrastructure for security but doesn't directly use Bouncy Castle APIs. Vulnerability Details CVEID:CVE-2025-8885...
UBUNTU-CVE-2026-23187
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc-domains Fix out-of-range access of bc-domains in imx8mblkctrlremove...
CVE-2026-23187
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc-domains Fix out-of-range access of bc-domains in imx8mblkctrlremove...
CVE-2026-23187
CVE-2026-23187 is tied to the Linux kernel: a bug in pmdomain/imx8m-blk-ctrl could trigger an out-of-range access to bc->domains in imx8m_blk_ctrl_remove(), potentially leading to memory corruption. The issue is acknowledged and listed in SUSE-SU-2026:1661-1 as CVE-2026-23187, with the fix des...
CVE-2026-23187
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc-domains Fix out-of-range access of bc-domains in imx8mblkctrlremove...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of boundary checks on the bc-domains mechanism, potentially leading to out-of-bounds...
PT-2026-8195
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to out-of-range access of bc-domains within the imx8m blk ctrl remove function. This issue affects the pmdomain and imx8m-blk-ctrl components...
Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (December 2025)
Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2025-8916 DESCRIPTION: Allocation of Resources Without Limits or Throttling...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989417)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989417 advisory. In the Linux kernel, the following vulnerability has been resolved: xprtrdma: treat all calls not a bcall when bcserv is NULL When a rdma server returns a fault form...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989919)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989919 advisory. In the Linux kernel, the following vulnerability has been resolved: xprtrdma: treat all calls not a bcall when bcserv is NULL When a rdma server returns a fault form...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988741)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988741 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: move bc link creation back to tipcnodecreate Shuang Li reported a NULL pointer dereference...
Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc.
Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc.This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in DisposalDaemon.java. In high-core environments under heavy load, the disposal thread can fall behind and allow excessive memory use. Note This issue was reported for environments...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in DisposalDaemon.java. In high-core environments under heavy load, the disposal thread can fall behind and allow excessive memory use. Note This issue was reported for environments...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987316)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987316 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: make sure fd closes complete During BCFREEBUFFER processing, the BINDERTYPEFDA object...
EUVD-2024-3273
Malicious code in bioql PyPI...
Out-of-bounds Write
org.bouncycastle, bc-fips is vulnerable to Out-of-bounds Write. The vulnerability is due to improper memory handling in org/bouncycastle/jcajce/provider/BaseCipher, which allows an attacker to write data outside the intended memory bounds and potentially execute arbitrary code...
Denial Of Service (DoS)
org.bouncycastle, bc-fips is vulnerable to Denial Of Service DoS. The vulnerability is due to excessive allocation in the org.Bouncycastle.Crypto.Fips.NativeLoader module, which allows an attacker to exhaust system resources and cause a denial of service...
