> CVE-2025-8885

« BACK_TO_HOME
PUBLISHED
2025-08-12 10:15
MODIFIED
2025-09-12 12:15
EPSS (Prob. Exploit)
0.54%
Top 55.2%
DATA SOURCES:
NVD 🔗 2025-10-18 RED HAT 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-04 OSV 🔗 2026-03-01

> DESCRIPTION

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerability is associated with program files https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdenti... https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.Java . This issue affects BC Java: from 1.0 through 1.77; BC-FJA: from 1.0.0 through 1.0.2.5, from 2.0.0 through 2.0.1.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> GITHUB SECURITY ADVISORY

GHSA-67mf-3cr5-8w23 MODERATE

Bouncy Castle for Java on All (API modules) allows Excessive Allocation

AFFECTED PACKAGES:
MAVEN / org.bouncycastle:bc-fips
>= 1.0.0, < 1.0.2.6
Fixed in: 1.0.2.6
MAVEN / org.bouncycastle:bc-fips
= 2.0.0
Fixed in: 2.0.1
MAVEN / org.bouncycastle:bctls-jdk18on
>= 1.0, < 1.78
Fixed in: 1.78
MAVEN / org.bouncycastle:bctls-jdk15to18
>= 1.0, < 1.78
Fixed in: 1.78
MAVEN / org.bouncycastle:bctls-jdk14
>= 1.0, < 1.78
Fixed in: 1.78
MAVEN / org.bouncycastle:bcprov-jdk18on
>= 1.0, < 1.78
Fixed in: 1.78
MAVEN / org.bouncycastle:bcprov-jdk15to18
>= 1.0, < 1.78
Fixed in: 1.78
MAVEN / org.bouncycastle:bcprov-jdk14
>= 1.0, < 1.78
Fixed in: 1.78

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

ALIASES:
GHSA-67mf-3cr5-8w23

> HISTORIQUE DES MODIFICATIONS

Première apparition
12/08/2025 10:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:07
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 18/10/2025 12:09
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 18/10/2025 12:09
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 1 year ago
« BACK_TO_HOME