Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m26p-m559-g5j5

Опубликовано: 01 мая 2022
Источник: github
Github: Прошло ревью

Описание

Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability

The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."

Пакеты

Наименование

bouncycastle:bcprov-jdk14

maven
Затронутые версииВерсия исправления

< 1.38

1.38

Наименование

bouncycastle:bcprov-jdk15

maven
Затронутые версииВерсия исправления

< 1.38

1.38

Наименование

bouncycastle:bcprov-jdk16

maven
Затронутые версииВерсия исправления

< 1.38

1.38

EPSS

Процентиль: 74%
0.00856
Низкий

Дефекты

CWE-203

Связанные уязвимости

redhat
около 18 лет назад

The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."

nvd
больше 16 лет назад

The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."

debian
больше 16 лет назад

The Legion of the Bouncy Castle Java Cryptography API before release 1 ...

EPSS

Процентиль: 74%
0.00856
Низкий

Дефекты

CWE-203