Skip to content
OpenAdvisories
Medium WID-SEC-2024-0001 1 CVE

Bouncy Castle: Schwachstelle ermöglicht Manipulation von Daten

Published Jan 1, 2024 · Updated Mar 23, 2026 · Revision 2 · de-DE

Vendor: Dell Product: Secure Connect Gateway Platform: Linux Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Bouncy Castle ausnutzen, um Daten zu manipulieren.

Product

Bouncy Castle ist eine Kryptographie-API für Java.

Vulnerabilities 1

  • Medium 5.5
    CVE-2022-45146

    Garbage collection issue in BC-FJA in Java 13 and later

    An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is possible for temporary keys used by the module to be zeroed …

    opensearch-2 org.bouncycastle:bc-fips Wolfi Maven

Revision history

  1. #2

    Neue Updates von Dell aufgenommen

  2. #1

    Initiale Fassung

References