There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java
    FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-
    lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program
    files core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCFB.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeGCM.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/fips/SHA256NativeDigest.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeEngine.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCBC.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCTR.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCFB.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCM.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeEngine.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCBC.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCMSIV.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCCM.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCTR.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA256NativeDigest.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA224NativeDigest.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA3NativeDigest.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHAKENativeDigest.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA512NativeDigest.Java,
    core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA384NativeDigest.Java. This issue affects Bouncy
    Castle for Java FIPS: from 2.1.0 through 2.1.1; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7.
    (CVE-2025-12194)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - Legion of the Bouncy Castle Inc. 中的 Bouncy Castle for Java FIPS bc-fips 全部 (API 模組)、Legion of the Bouncy Castle Inc. Bouncy Castle for Java 中不受控制的資源消耗弱點過度配置。此弱點與程式檔案 core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCFB.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeGCM.Java 相關、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/SHA256NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeEngine.Java、core/src/main /jdk1.9/org/bouncycastle/crypto/fips/AESNativeCBC.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCTR.Java、core/src/main/jdk1.9/org /bouncycastle/crypto/engines/AESNativeCFB.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCM.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines /AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCMSIV.Java, core /src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCCM.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCTR.Java、core/src/main/j dk1.9/org/bouncycastle/crypto/digests/SHA256NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA224NativeDigest.Java、core/src/main/jdk1.9/org/ bouncycastle/crypto/digests/SHA3NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHAKENativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/ SHA512NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA384NativeDigest.Java。此問題會從 2.1.0 到 2.1.1影響 Bouncy Castle for Java FIPS Bouncy Castle for Java LTS從 2.73.0 到 2.73.7。
    (CVE-2025-12194)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Legion of the Bouncy Castle Inc. Bouncy Castle API 模块上的 Java LTS bcprov-lts8on 允许使用不受控制的资源消耗漏洞过度分配。此漏洞与程序文件 core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCFB.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeGCM.Java 有关。 、 core/src/main/jdk1.9/org/bouncycastle/crypto/fips/SHA256NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeEngine.Java、core/src/main /jdk1.9/org/bouncycastle/crypto/fips/AESNativeCBC.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCTR.Java、core/src/main/jdk1.9/org /bouncycastle/crypto/engines/AESNativeCFB.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCM.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines /AESNativeEngine.Javacore/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCBC.Javacore/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCMSIV.Java /src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCCM.Javacore/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCTR.Javacore/src/main/j dk1.9/org/bouncycastle/crypto/digests/SHA256NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA224NativeDigest.Java、core/src/main/jdk1.9/org/ bouncycastle/crypto/digests/SHA3NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHAKENativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/ SHA512NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA384NativeDigest.Java。此问题影响 Java FIPS 的 Bouncy Castle从 2.1.0 到 2.1.1Bouncy Castle for Java LTS从 2.73.0 到 2.73.7。
    (CVE-2025-12194)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on AllAPI モジュール、Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on AllAPI モジュールの Region における制御されないリソース消費の脆弱性により、過剰な割り当て。この脆弱性は、プログラムファイルcore/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCFB.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeGCM.Javaに関連しています。 、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/SHA256NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeEngine.Java、core/src/main /jdk1.9/org/bouncycastle/crypto/fips/AESNativeCBC.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCTR.Java、core/src/main/jdk1.9/org /bouncycastle/crypto/engines/AESNativeCFB.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCM.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines /AESNativeEngine.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCBC.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCMSIV.Java、core /src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCCM.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCTR.Java、core/src/main/j dk1.9/org/bouncycastle/crypto/digests/SHA256NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA224NativeDigest.Java、core/src/main/jdk1.9/org/ bouncycastle/crypto/digests/SHA3NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHAKENativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/ SHA512NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA384NativeDigest.Java。この問題は Java FIPS 用の Bouncy Castle に影響します 2.1.0 から 2.1.1まで。 Bouncy Castle for Java LTS 2.73.0 から 2.73.7。
    (CVE-2025-12194)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java     FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-     lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program     files core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCFB.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeGCM.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/fips/SHA256NativeDigest.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeEngine.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCBC.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCTR.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCFB.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCM.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeEngine.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCBC.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCMSIV.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCCM.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCTR.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA256NativeDigest.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA224NativeDigest.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA3NativeDigest.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHAKENativeDigest.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA512NativeDigest.Java,     core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA384NativeDigest.Java. This issue affects Bouncy     Castle for Java FIPS: from 2.1.0 through 2.1.1; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7.
    (CVE-2025-12194)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
459069	Echo: org.bouncycastle:bc-fips: security update to 2.1.2	Tenable Self-Hosted Container Security	Echo Local Security Checks	10/2/2026	10/5/2026	medium
435837	SCA: security update for org.bouncycastle:bc-fips, org.bouncycastle:bcprov-debug-lts8on (GHSA-jv6h-4262-q663)	Tenable Cloud Security	SCA Checks	10/28/2025	7/2/2026	medium
459069	Echo: org.bouncycastle:bc-fips: security update to 2.1.2	Tenable Cloud Security	Echo Local Security Checks	10/2/2026	10/5/2026	medium
435837	SCA: security update for org.bouncycastle:bc-fips, org.bouncycastle:bcprov-debug-lts8on (GHSA-jv6h-4262-q663)	Tenable Self-Hosted Container Security	SCA Checks	10/28/2025	7/2/2026	medium
271707	Linux Distros 未修補的弱點：CVE-2025-12194	Nessus	Misc.	10/27/2025	10/5/2026	medium
271707	Linux Distros 未修补的漏洞：CVE-2025-12194	Nessus	Misc.	10/27/2025	10/5/2026	medium
271707	Linux Distros のパッチ未適用の脆弱性: CVE-2025-12194	Nessus	Misc.	10/27/2025	10/5/2026	medium
271707	Linux Distros Unpatched Vulnerability : CVE-2025-12194	Nessus	Misc.	10/27/2025	10/5/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium