Описание
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
A flaw was found in Bouncy Castle for Java. When using CCM-family (Counter with CBC-MAC) modes, the software writes plaintext data into a buffer before verifying the cryptographic tag. This could allow an attacker to manipulate data that is later assumed to be authentic, leading to a high integrity impact if the plaintext is processed before the tag validation completes.
Отчет
This flaw has an Important impact. Bouncy Castle for Java's CCM-family authenticated encryption modes (Counter with CBC-MAC) write decrypted plaintext to the caller's buffer before verifying the cryptographic tag. A remote attacker can exploit this by sending manipulated ciphertext, which will be decrypted and written to the buffer. If the application processes this buffer before the tag verification completes and fails, the attacker has successfully bypassed the integrity protection, allowing manipulation of data that the application assumes is authenticated. This affects applications using CCMBlockCipher, KCCMBlockCipher, or KGCMBlockCipher modes from the Bouncy Castle crypto provider.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat AMQ Broker 7 | bcpkix-jdk18on | Not affected | ||
| Red Hat AMQ Broker 7 | bcprov-jdk18on | Affected | ||
| Red Hat AMQ Broker 7 | bcutil-jdk18on | Not affected | ||
| Red Hat build of Apache Camel 4 for Quarkus 3 | bcpg-jdk18on | Not affected | ||
| Red Hat build of Apache Camel 4 for Quarkus 3 | bcpkix-jdk18on | Not affected | ||
| Red Hat build of Apache Camel 4 for Quarkus 3 | bcprov-jdk18on | Not affected | ||
| Red Hat build of Apache Camel 4 for Quarkus 3 | bcutil-jdk18on | Not affected | ||
| Red Hat build of Apache Camel for Spring Boot 4 | bcpkix-jdk18on | Not affected | ||
| Red Hat build of Apache Camel for Spring Boot 4 | bcprov-jdk18on | Affected | ||
| Red Hat build of Apache Camel for Spring Boot 4 | bcutil-jdk18on | Not affected |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintex ...
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
EPSS
7.5 High
CVSS3