GHSA-574f-3g2m-x479
Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks
At a glance
- Published
- Updated
- CVE
- CVE-2025-14813
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS_V4
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/RE:M/U:Red
Description
The GOST 28147-2015 CTR mode implementation (`G3413CTRBlockCipher`) in the Legion of the Bouncy Castle BC-JAVA `bcprov` core module only increments the final byte of the counter, so the counter wraps after 255 blocks and the keystream is reused. Reusing CTR keystream allows an attacker who can observe two ciphertexts produced with the same key/IV to recover the XOR of the plaintexts, breaking confidentiality. Affects BC-JAVA from 1.59 before 1.84 (with backported fixes in 1.80.2 and 1.81.1).
Affected packages
| Package | Versions |
|---|---|
| Maven · org.bouncycastle:bcprov-jdk14 | introduced 1.59, last affected 1.80.1 |
| Maven · org.bouncycastle:bcprov-jdk15to18 | introduced 1.59, last affected 1.80.1 |
| Maven · org.bouncycastle:bcprov-jdk18on | introduced 1.59, fixed 1.80.2 |
| Maven · org.bouncycastle:bcprov-debug-jdk14 | introduced 1.59, last affected 1.80.1 |
| Maven · org.bouncycastle:bcprov-debug-jdk15to18 | introduced 1.59, last affected 1.80.1 |
| Maven · org.bouncycastle:bcprov-debug-jdk18on | introduced 1.59, last affected 1.80.1 |
| Maven · org.bouncycastle:bcprov-ext-jdk14 | introduced 1.59, last affected 1.78.1 |
| Maven · org.bouncycastle:bcprov-ext-jdk15to18 | introduced 1.59, last affected 1.78.1 |
| Maven · org.bouncycastle:bcprov-ext-jdk18on | introduced 1.59, last affected 1.78.1 |
| Maven · org.bouncycastle:bcprov-ext-debug-jdk14 | introduced 1.59, last affected 1.74 |
| Maven · org.bouncycastle:bcprov-ext-debug-jdk15to18 | introduced 1.59, last affected 1.77 |
| Maven · org.bouncycastle:bcprov-ext-debug-jdk18on | introduced 1.59, last affected 1.77 |
| Maven · org.bouncycastle:bcprov-jdk14 | 1.81.0 |
| Maven · org.bouncycastle:bcprov-jdk15to18 | 1.81.0 |
| Maven · org.bouncycastle:bcprov-jdk18on | introduced 1.81.0, fixed 1.81.1 |
| Maven · org.bouncycastle:bcprov-debug-jdk14 | 1.81.0 |
| Maven · org.bouncycastle:bcprov-debug-jdk15to18 | 1.81.0 |
| Maven · org.bouncycastle:bcprov-debug-jdk18on | 1.81.0 |
| Maven · org.bouncycastle:bcprov-jdk14 | introduced 1.82, fixed 1.84 |
| Maven · org.bouncycastle:bcprov-jdk15to18 | introduced 1.82, fixed 1.84 |
| Maven · org.bouncycastle:bcprov-jdk18on | introduced 1.82, fixed 1.84 |
| Maven · org.bouncycastle:bcprov-debug-jdk14 | introduced 1.82, fixed 1.84 |
| Maven · org.bouncycastle:bcprov-debug-jdk15to18 | introduced 1.82, fixed 1.84 |
| Maven · org.bouncycastle:bcprov-debug-jdk18on | introduced 1.82, fixed 1.84 |
| Maven · org.bouncycastle:bcprov-debug-jdk15on | introduced 0, last affected 1.7.0 |
| Maven · org.bouncycastle:bcprov-jdk15on | introduced 0, last affected 1.7.0 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-14813 ADVISORY
- https://github.com/bcgit/bc-java/commit/b42574345414e4b7c8051b16fa1fafe01c29871f WEB
- https://github.com/bcgit/bc-java/commit/701686cb0184cd9ae103c801b3581fdf95c6d4f3 WEB
- https://access.redhat.com/errata/RHSA-2026:11720 WEB
- https://access.redhat.com/errata/RHSA-2026:60248 WEB
- https://access.redhat.com/errata/RHSA-2026:60249 WEB
- https://access.redhat.com/errata/RHSA-2026:60250 WEB
- https://access.redhat.com/errata/RHSA-2026:60251 WEB
- https://access.redhat.com/errata/RHSA-2026:60252 WEB
- https://access.redhat.com/errata/RHSA-2026:60254 WEB
- https://access.redhat.com/errata/RHSA-2026:60256 WEB
- https://access.redhat.com/errata/RHSA-2026:60259 WEB
- https://access.redhat.com/errata/RHSA-2026:66488 WEB
- https://access.redhat.com/security/cve/CVE-2025-14813 WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2458640 WEB
- https://github.com/bcgit/bc-java PACKAGE
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813 WEB
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14813.json WEB
- https://access.redhat.com/errata/RHSA-2026:11721 WEB
- https://access.redhat.com/errata/RHSA-2026:13631 WEB
- https://access.redhat.com/errata/RHSA-2026:14272 WEB
- https://access.redhat.com/errata/RHSA-2026:14276 WEB
- https://access.redhat.com/errata/RHSA-2026:17668 WEB
- https://access.redhat.com/errata/RHSA-2026:18054 WEB
- https://access.redhat.com/errata/RHSA-2026:18055 WEB
- https://access.redhat.com/errata/RHSA-2026:18059 WEB
- https://access.redhat.com/errata/RHSA-2026:21772 WEB
- https://access.redhat.com/errata/RHSA-2026:24977 WEB
- https://access.redhat.com/errata/RHSA-2026:53644 WEB
- https://access.redhat.com/errata/RHSA-2026:53645 WEB
- https://access.redhat.com/errata/RHSA-2026:53646 WEB
- https://access.redhat.com/errata/RHSA-2026:53806 WEB
- https://access.redhat.com/errata/RHSA-2026:60239 WEB
- https://access.redhat.com/errata/RHSA-2026:60246 WEB
- https://access.redhat.com/errata/RHSA-2026:60247 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |