CyberRota Analysis
AI-GeneratedBouncy Castle for Java versions prior to 1.85, as well as specific LTS and FIPS versions, contain a vulnerability where Lazy ASN.1 sequence forcing can reset the nesting-depth guard. This flaw may lead to potential denial-of-service conditions or other unexpected behavior due to improper handling of ASN.1 sequences. Organizations utilizing affected versions of Bouncy Castle should prioritize updating to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
Related CVEs
Other vulnerabilities affecting the same vendor(s)