PT-2026-33032 · Bc-Java · Bc-Java

Sunwoo Lee · Publicado 2026-04-15 · Atualizado 2026-05-21 · CVE-2026-5598

Positive Technologies (AI Summary) · Pt

CVSS v4.0

8.9

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Red

Name of the Vulnerable Software and Affected Versions BC-JAVA versões 1.71 até 1.83

Description Um canal lateral de temporização (covert timing channel) existe nos módulos core do BC-JAVA, especificamente associado aos arquivos de programa FrodoEngine.Java. Um canal lateral de temporização é um método de transferir informações de um processo para outro manipulando o tempo dos eventos.

Recommendations Atualizar para a versão 1.84.

Exploit

Correção

Enumeração de Fraquezas

CWE-385

Identificadores relacionados

CLEANSTART-2026-PK73499

CLEANSTART-2026-PO27799

CLEANSTART-2026-VJ37814

CVE-2026-5598

GHSA-P93R-85WP-75V3

OPENSUSE-SU-2026:10571-1

RHSA-2026:12267

Produtos afetados

Bc-Java

Referências · 101

• 🔥 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998 · Exploit
• 🔥 https://github.com/bcgit/bc-java/wiki/CVE-2026-5598 · Exploit
• 🔥 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598 · Exploit
• https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5 · Correção
• https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87 · Correção
• https://github.com/bcgit/bc-java · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PO27799.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PK73499.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-VJ37814.json · Nota
• https://osv.dev/vulnerability/ghsa-mj4r-2hfc-f8p6 · Nota
• https://osv.dev/vulnerability/CVE-2026-42579 · Nota
• https://osv.dev/vulnerability/ghsa-98qh-xjc8-98pq · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1002 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5598 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-42581 · Nota