14 matches found
Excessive Iteration
Overview Affected versions of this package are vulnerable to Excessive Iteration in the HashRatchet.getint generation method of GroupKeySet, reached through PrivateMessage.unprotect, which loops while nextGeneration generation next; and caches every intermediate KeyGeneration in an unbounded...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
DEBIAN-CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
UBUNTU-CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644 MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644 MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
EUVD-2026-52030
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644 MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender...
CVE-2026-59644
CVE-2026-59644 affects Bouncy Castle for Java up to version 1.84, where the MLS hash-ratchet may honor an arbitrary 32-bit generation counter from the sender. This can impact availability (per CVSS: HIGH) with no confidentiality or integrity impact reported, and no exploitation details are provid...
PT-2026-67237
Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Description The MLS hash-ratchet mechanism accepts an arbitrary 32-bit generation counter provided by the sender. A hash-ratchet is a cryptographic process used to derive new keys for each message ...
