PT-2026-104100 · Bouncy Castle · Bc-Csharp
CVSS v4.0
8.2
عالية
| المتجه | AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
bc-csharp versions prior to 2.7.0
Description
Improper validation of the integrity check value in the AES-CCM implementation, specifically within
CcmParameters and CcmBlockCipher, allows an on-path attacker to modify CCM-encrypted content without detection. This occurs because CcmParameters accepts any value for the authentication tag (aes-ICVlen), and CcmBlockCipher only validates the tag length during encryption. Consequently, decryption may compare a zero-length or excessively short tag. Affected paths include ParameterUtilities.GetCipherParameters, which is utilized by CmsEnvelopedData and CmsEnvelopedDataParser for EnvelopedData encrypted with AES-CCM, as well as any caller providing an unchecked tag length to CcmBlockCipher for decryption.Recommendations
Update to version 2.7.0 or later.
استغلال
إصلاح
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Bc-Csharp