Threats Tagged 'ghsa-8hgf-w73g-3x6v'

Bouncy Castle for Java versions before 1.86 contain a vulnerability where truncated OpenPGP encrypted messages are accepted without error, leading to missing integrity checks on certain decryption paths. Specifically, on the SEIPD version 1 path, truncated messages bypass integrity verification, allowing altered plaintext to be accepted silently. On the AEAD path, truncated chunks cause subsequent packets to be dropped without error, potentially causing signed and encrypted messages to be read as unsigned. This issue also affects certain LTS and FIPS editions on the AEAD route. The vulnerability is a missing truncation error rather than a forgery and is a residual effect of a previous CVE. The low-level API is unaffected, and reading in increments of a whole AEAD chunk or more avoids the issue. Fixes have been implemented in the handling of EOFExceptions and stream closing behavior.