Uncontrolled Resource Consumption

🗓️ 26 Aug 2026 20:01:20Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 4 Views

Uncontrolled Resource Consumption in Bouncy Castle allows DoS via quadratic-time processing.

Reporter	Title	Published	Views	Family All 95
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	24 Sep 202614:38	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	16 Sep 202606:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Bouncy Castle	16 Sep 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bcprov-jdk18on bundled with IBM Fusion and IBM Fusion HCI.	1 Oct 202623:41	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities in Bouncy Castle for Java	29 Sep 202617:05	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Bouncy Castle for Java, IBM Sterling Control Center is vulnerable to Memory Allocation, Improper Validation, Inadequate Encryption Strength, Inefficient Algorithmic Complexity and LDAP Injection.	22 Sep 202610:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition	22 Sep 202607:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Bouncy Castle for Java	9 Sep 202604:41	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in Bouncy Castle for Java	8 Sep 202614:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Global Availability Mailbox is affected by vulnerabilities in bouncy castle	15 Sep 202604:25	–	ibm

Vulners

Node

bcprov-ext-debug-jdk15on bcprov-ext-debug-jdk15onRange1.52–1.70java

bcprov-jdk12 bcprov-jdk12Range1.61–130java

bcprov-jdk15on bcprov-jdk15onRange1.0.3–1.78java

bc-fips-debug bc-fips-debugRange1.0.2–2.0.1java

bcprov-lts8on bcprov-lts8onRange2.73.0–2.73.11java

bcprov-ext-jdk15on bcprov-ext-jdk15onRange1.46–1.73java

bcprov-debug-jdk14 bcprov-debug-jdk14Range1.49–1.84java

bouncycastle bc-fipsRange1.0.0–1.0.2.6java

bouncycastle bc-fipsRange2.0.0–2.0.1java

bouncycastle bc-fipsRange2.1.0–2.1.2java

bcprov-debug-jdk15to18 bcprov-debug-jdk15to18Range1.59–1.84java

bcprov-jdk16 bcprov-jdk16Range1.38–1.73java

bcprov-jdk18on bcprov-jdk18onRange1.0–1.84java

bcprov-jdk15to18 bcprov-jdk15to18Range1.0–1.84java

bcprov-debug-lts8on bcprov-debug-lts8onRange2.73.0–2.73.11java

bcprov-ext-jdk14 bcprov-ext-jdk14Range1.45–1.78.1java

bcprov-debug-jdk18on bcprov-debug-jdk18onRange1.59–1.84java

bcprov-jdk15 bcprov-jdk15Range1.32–138java

bcprov-jdk14 bcprov-jdk14Range1.0–1.84java

bcprov-debug-jdk15on bcprov-debug-jdk15onRange1.49–1.70java

bcprov-ext-debug-jdk14 bcprov-ext-debug-jdk14Range1.59–1.74java

Source	Link
github	www.github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058059
github	www.github.com/bcgit/bc-java/commit/7bf20eea8c1b71a4d3574b75ba20ccf26ffff36b
github	www.github.com/advisories/GHSA-4mwx-9cgq-h2wp

02 Sep 2026 16:33Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

CVSS 48.7

EPSS0.00493

SSVC