Medium WID-SEC-2025-2415 1 CVE

Bouncy Castle: Schwachstelle ermöglicht Denial of Service

Published Oct 26, 2025 · Updated Oct 26, 2025 · de-DE

Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Bouncy Castle ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Bouncy Castle ist eine Kryptographie-API für Java.

Vulnerabilities 1

Medium 5.9

CVE-2025-12194

Bouncy Castle Vulnerable to Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Alloc…

Legion of the Bouncy Castle Bouncy Castle for Java LTS Bouncy Castle for Java FIPS bouncycastle Debian Wolfi Maven

Oct 24, 2025

Revision history

2025-10-26 #1
Initiale Fassung

References

GitHub Advisory vom 2025-10-26
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9012194
NIST vulenrability Database vom 2025-10-26
https://nvd.nist.gov/vuln/detail/CVE-2025-12194