VDB
RHSA-2026:53806
RHSA-2026:53806
PUBLISHED
CVSS 8.699999809265137 HIGH
A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The `GOSTCTR` implementation is unable to securely process more than 255 blocks of data due to keystream reuse. This issue allows an attacker to break the fundamental confidentiality of any data protected by the `G3413CTRBlockCipher`, potentially leading to the recovery and access of encrypted data.
Risk Scores
CVSS 3.1
8.699999809265137
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4.25 |
Timeline
- Aug 11, 2026 CVE Published
- Sep 2, 2026 CVE Updated
- Sep 2, 2026 Distribution Patch
- Sep 2, 2026 Distribution Patch
- Sep 2, 2026 Security Advisory
- Sep 2, 2026 Security Advisory
- Sep 2, 2026 Security Advisory
- Sep 2, 2026 Security Advisory
- Sep 2, 2026 Security Advisory
- Sep 2, 2026 Security Advisory
- Sep 2, 2026 Security Advisory
- Sep 2, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:53806 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4 advisory
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2444320 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2458634 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2458635 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2458638 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2458640 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2458641 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2467540 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2477217 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2477220 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2477224 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2477226 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2477227 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2477232 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2477930 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2480325 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2480601 issue
…and 191 more