Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the JCE Cipher.doFinal function in org/bouncycastle/jcajce/provider/BaseCipher when the same byte array is used for both input and output during native encrypt or decrypt operations. An attacker can cause data...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the JCE Cipher.doFinal function in org/bouncycastle/jcajce/provider/BaseCipher when the same byte array is used for both input and output during native encrypt or decrypt operations. An attacker can cause data...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the AESNativeCBC class due to the use of a private instance class, rather than a private static class. An attacker can cause heap exhaustion by triggering excessive memory allocati...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the AESNativeCBC class due to the use of a private instance class, rather than a private static class. An attacker can cause heap exhaustion by triggering excessive memory allocati...

CVE-2025-9340 native encrypt/decrypt operations in JCE may corrupt data if same byte array used for input and output.

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All API modules. This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0...

CVE-2025-9340

CVE-2025-9340 is an Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java—BC-FJA 2.1.0 (API modules), affecting the file org/bouncycastle/jcajce/provider/BaseCipher. IBM security bulletins confirm this issue alongside CVE-2025-9341 and tie the impact to BC-F...

GHSA-JFCV-JV9G-2VX2 Bouncy Castle for Java has Uncontrolled Resource Consumption Vulnerability

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All API modules allows Excessive Allocation. This vulnerability is associated with program files org/bouncycastle/crypto/fips/AESNativeCBC.Java. This issue affects Bouncy...

CVE-2025-9341 Garbage collection can delay for AES CBC Native support, resulting in heap exhaustion

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All API modules, Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All API modules allows Excessive Allocation. This vulnerability is associated wi...

Linux Distros Unpatched Vulnerability : CVE-2023-6237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function EVPPKEYpubliccheck to...

Ubuntu: Security Advisory (USN-7701-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7704-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, chainctl, tflint, xeol-fips, trivy-fips, xeol, opentofu-fips, terraform-fips, conftest, conftest-fips, grype-fips, trivy, steampipe, kubescape, cloudbeat, zarf, terragrunt, wolfictl, k9s-fips, opentofu, cloudbeat-fips, rancher-fleet, snyk-cli,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: k3s, amazon-ecs-agent, cluster-api-helm-controller, consul-k8s-fips, portieris, crossplane, harbor-fips, harvester, redpanda, bom, xeol-fips, ctop, bento, kubeflow-katib, vault, cluster-api-fips, promxy, tekton-pipelines, amazon-cloudwatch-agent-operator-fips,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: k3s, amazon-ecs-agent, cluster-api-helm-controller, consul-k8s-fips, portieris, crossplane, harbor-fips, harvester, redpanda, bom, xeol-fips, ctop, bento, kubeflow-katib, vault, cluster-api-fips, promxy, tekton-pipelines, amazon-cloudwatch-agent-operator-fips,...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via org.Bouncycastle.Crypto.Fips.NativeLoader. An attacker can cause excessive resource allocation by deploying hybrid modules in multi-JVM environments, potentially leading to resour...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via org.Bouncycastle.Crypto.Fips.NativeLoader. An attacker can cause excessive resource allocation by deploying hybrid modules in multi-JVM environments, potentially leading to resour...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, consul-k8s-fips, cerbos-fips, helm-docs, trivy-operator-fips, harbor-fips, helm-operator-fips, linkerd2, pluto, cerbos, flux-helm-controller, flux, kuma, chart-testing-fips, nova, headlamp-fips, flux-fips, eksctl, helm-push, trivy-fips,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, consul-k8s-fips, cerbos-fips, helm-docs, trivy-operator-fips, harbor-fips, helm-operator-fips, linkerd2, pluto, cerbos, flux-helm-controller, flux, kuma, chart-testing-fips, nova, headlamp-fips, flux-fips, eksctl, helm-push, trivy-fips,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, consul-k8s-fips, cerbos-fips, helm-docs, trivy-operator-fips, harbor-fips, helm-operator-fips, linkerd2, pluto, cerbos, flux-helm-controller, flux, kuma, chart-testing-fips, nova, headlamp-fips, flux-fips, eksctl, helm-push, trivy-fips,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, consul-k8s-fips, cerbos-fips, helm-docs, trivy-operator-fips, harbor-fips, helm-operator-fips, linkerd2, pluto, cerbos, flux-helm-controller, flux, kuma, chart-testing-fips, nova, headlamp-fips, flux-fips, eksctl, helm-push, trivy-fips,...