The vulnerability in bc-csharp before 2.7.0 arises from the PKMacBuilder component used in CMP/CRMF password-based MAC verification. When the PBMParameter specifies a very large iteration count, the verifier performs excessive hash iterations, causing CPU exhaustion and denial of service. The iteration count limit is only applied if the caller uses the PKMacBuilder constructor that accepts an explicit maximum iteration count. Otherwise, the verification methods ProtectedPkiMessage.Verify and CertificateRequestMessage.IsValidSigningKeyPop execute as many iterations as requested, up to approximately 2^31, before verifying the MAC. This lack of throttling allows remote unauthenticated attackers to exhaust server CPU resources.

This vulnerability allows remote unauthenticated attackers to cause denial of service via CPU exhaustion by sending specially crafted CMP or CRMF messages with large iteration counts. The affected component performs excessive hash iterations without enforcing iteration limits, leading to resource exhaustion and service disruption. There is no indication of confidentiality, integrity, or authentication bypass impacts.

A fix is available in bc-csharp version 2.7.0 that enforces iteration count limits properly. Users should upgrade to version 2.7.0 or later to mitigate this vulnerability. Until upgraded, avoid using constructors that do not enforce iteration count ceilings or implement external throttling controls if possible.