Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - Legion of the Bouncy Castle Inc. 中的 Bouncy Castle for Java FIPS bc-fips 全部 (API 模組)、Legion of the Bouncy Castle Inc. Bouncy Castle for Java 中不受控制的資源消耗弱點過度配置。此弱點與程式檔案 core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCFB.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeGCM.Java 相關、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/SHA256NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeEngine.Java、core/src/main /jdk1.9/org/bouncycastle/crypto/fips/AESNativeCBC.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCTR.Java、core/src/main/jdk1.9/org /bouncycastle/crypto/engines/AESNativeCFB.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCM.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines /AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCMSIV.Java, core /src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCCM.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCTR.Java、core/src/main/j dk1.9/org/bouncycastle/crypto/digests/SHA256NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA224NativeDigest.Java、core/src/main/jdk1.9/org/ bouncycastle/crypto/digests/SHA3NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHAKENativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/ SHA512NativeDigest.Java、core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA384NativeDigest.Java。此問題會從 2.1.0 到 2.1.1影響 Bouncy Castle for Java FIPS Bouncy Castle for Java LTS從 2.73.0 到 2.73.7。
    (CVE-2025-12194)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-12194

medium Nessus Plugin ID 271707

版本 1.6