Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-1000344

Опубликовано: 04 июн. 2018
Источник: debian
EPSS Низкий

Описание

In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
bouncycastlefixed1.56-1package
bouncycastleignoredjessiepackage

Примечания

  • https://github.com/bcgit/bc-java/commit/9385b0ebd277724b167fe1d1456e3c112112be1f

EPSS

Процентиль: 81%
0.02208
Низкий

Связанные уязвимости

CVSS3: 7.4
ubuntu
около 8 лет назад

In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

CVSS3: 4.8
redhat
больше 10 лет назад

In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

CVSS3: 7.4
nvd
около 8 лет назад

In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

CVSS3: 7.4
github
почти 8 лет назад

In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode

suse-cvrf
около 8 лет назад

Security update for bouncycastle

EPSS

Процентиль: 81%
0.02208
Низкий