CVE-2015-0886

CVE-2015-0886 describes an integer overflow in the jBCrypt key-stretching implementation (versions prior to 0.4) that affects Fedora and jBCrypt products. This vulnerability, with a CVSS score of 5.0, allows remote attackers to more easily brute-force password hashes due to the overflow occurring at the maximum exponent. While the attack complexity is low and requires no authentication, the impact is limited to confidentiality (disclosure of password hashes). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.