Описание
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this by providing a specially crafted message to the MLS wire decoder. The decoder allocates an attacker-declared opaque length without first performing a bounds check. This can lead to excessive memory allocation, resulting in a Denial of Service (DoS) for the application.
Отчет
This vulnerability targets the Messaging Layer Security (MLS) module, which in Bouncy Castle is packaged as bcmls. No Red Hat products are affected.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Cryostat 4 | bcpkix-jdk18on | Not affected | ||
| Cryostat 4 | bcprov-jdk18on | Not affected | ||
| Cryostat 4 | bcutil-jdk18on | Not affected | ||
| OpenShift Developer Tools and Services | jenkins | Not affected | ||
| OpenShift Developer Tools and Services | jenkins-2-plugins | Not affected | ||
| OpenShift Developer Tools and Services | ocp-tools-4/jenkins-agent-base-rhel8 | Not affected | ||
| OpenShift Developer Tools and Services | ocp-tools-4/jenkins-agent-base-rhel9 | Not affected | ||
| OpenShift Developer Tools and Services | ocp-tools-4/jenkins-rhel8 | Not affected | ||
| OpenShift Developer Tools and Services | ocp-tools-4/jenkins-rhel9 | Not affected | ||
| Red Hat AMQ Broker 7 | bcpkix-jdk18on | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates atta ...
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
EPSS
7.5 High
CVSS3