Описание
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| bouncycastle | unfixed | package |
Примечания
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059644
Fixed by: https://github.com/bcgit/bc-java/commit/610d8757d855afe197df0de6d831cb75c81e3b9f (r1rv85)
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 2 месяцев назад
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
CVSS3: 7.5
nvd
около 2 месяцев назад
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
CVSS3: 7.5
github
около 2 месяцев назад
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.