Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerability is associated with program files https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdenti... https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.Java . This issue affects BC Java: from 1.0 through 1.77; BC-FJA: from 1.0.0 through 1.0.2.5, from 2.0.0 through 2.0.1.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.bouncycastle:bcprov-jdk14(Maven) | 1.0 | 1.78 | N/A |
| org.bouncycastle:bcprov-jdk15to18(Maven) | 1.0 | 1.78 | N/A |
| org.bouncycastle:bcprov-jdk18on(Maven) | 1.0 | 1.78 | N/A |
| org.bouncycastle:bctls-jdk14(Maven) | 1.0 | 1.78 | N/A |
| org.bouncycastle:bctls-jdk15to18(Maven) | 1.0 | 1.78 | N/A |
| org.bouncycastle:bctls-jdk18on(Maven) | 1.0 | 1.78 | N/A |
| org.bouncycastle:bc-fips(Maven) | 1.0.0 | 1.0.2.6 | N/A |
| org.bouncycastle:bc-fips(Maven) | 2.0.0 | 2.0.1 | N/A |
CVSS Metrics
