CVE-2025-8916

Public on 2025-08-13

Modified on 2025-08-15

Description

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive Allocation. This issue affects Bouncy Castle for Java: from BC 1.44 through 1.78, from BCPKIX FIPS 1.0.0 through 1.0.7, from BCPKIX FIPS 2.0.0 through 2.0.7.

Severity

Low

See what this means

CVSS v3 Base Score

2.9

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory	Status
Amazon Linux 2023	bouncycastle			Pending Fix
Amazon Linux 2 - Core	resteasy-base			Not Affected

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	2.9	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2025-8916 Mitre: CVE-2025-8916