Описание
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader.
This issue affects Bouncy Castle for Java - BC-FJA 2.1.0: from BC-FJA 2.1.0 through 2.1.0.
Uncontrolled Resource Consumption vulnerability has been discovered in the Legion of the Bouncy Castle Inc. Bouncy Castle for Java. In multi-JVM environments BC-FJA 2.1.0 could be found to create many library directories for the .so files required for native support, even though the files contained in the directories could have been shared. This could lead to server fragility, particularly in the case where it was difficult to identify which library directories were in use and which were not, with the subsequent strain on resources leading to service failure.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Cryostat 4 | bcpkix-jdk18on | Fix deferred | ||
| Cryostat 4 | bcprov-jdk18on | Fix deferred | ||
| Cryostat 4 | bcutil-jdk18on | Fix deferred | ||
| Logging Subsystem for Red Hat OpenShift | bcmail-jdk15on | Fix deferred | ||
| Logging Subsystem for Red Hat OpenShift | bcpg-jdk15on | Fix deferred | ||
| Logging Subsystem for Red Hat OpenShift | bcpkix-jdk15on | Fix deferred | ||
| Logging Subsystem for Red Hat OpenShift | bcprov-jdk15on | Fix deferred | ||
| Red Hat AMQ Broker 7 | bcpkix-jdk15on | Fix deferred | ||
| Red Hat AMQ Broker 7 | bcpkix-jdk18on | Fix deferred | ||
| Red Hat AMQ Broker 7 | bcprov-jdk15on | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
1.8 Low
CVSS3
Связанные уязвимости
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castle for Java - BC-FJA 2.1.0: from BC-FJA 2.1.0 through 2.1.0.
Bouncy Castle for Java Uncontrolled Resource Consumption Vulnerability
EPSS
1.8 Low
CVSS3