bouncycastle bouncy castle crypto package vulnerabilities and exploits

(subscribe to this query)

The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package prior to 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."

Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.01 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.02 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.03 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.04 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.05 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.06 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.07 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.08 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.09 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.10 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.11 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.12 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.13 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.14 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.15 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.16 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.17 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.18 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.19 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.20 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.21

Bouncy Castle BC Java prior to 1.66, BC C# .NET prior to 1.8.7, BC-FJA prior to 1.0.1.2, 1.0.2.1, and BC-FNA prior to 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information fo...

Bouncycastle Legion-of-the-bouncy-castle-fips-java-api Bouncycastle Bc-csharp Bouncycastle Bouncy Castle Fips .net Api Bouncycastle The Bouncy Castle Crypto Package For Java

2 Github repositories

The Bouncy Castle Java library prior to 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote malicious users to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve att...

Opensuse Leap 42.1 Opensuse Opensuse 13.1 Opensuse Opensuse 13.2 Bouncycastle Bouncy Castle Crypto Package Oracle Peoplesoft Enterprise Peopletools 8.54 Oracle Virtual Desktop Infrastructure 3.5.2 Oracle Enterprise Manager Ops Center 12.2.2 Oracle Application Testing Suite 12.5.0.2 Oracle Application Testing Suite 12.5.0.1 Oracle Enterprise Manager Ops Center 12.1.4 Oracle Application Testing Suite 12.5.0.3 Oracle Peoplesoft Enterprise Peopletools 8.55

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook