Логотип exploitDog
bind:"CVE-2015-7940"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2015-7940"

Количество 7

Количество 7

ubuntu логотип

CVE-2015-7940

около 10 лет назад

The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."

CVSS2: 5
EPSS: Низкий
redhat логотип

CVE-2015-7940

больше 10 лет назад

The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2015-7940

около 10 лет назад

The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2015-7940

около 10 лет назад

The Bouncy Castle Java library before 1.51 does not validate a point i ...

CVSS2: 5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2015:1911-1

больше 10 лет назад

Security update for bouncycastle

EPSS: Низкий
github логотип

GHSA-4mv7-cq75-3qjm

больше 7 лет назад

Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

EPSS: Низкий
fstec логотип

BDU:2015-12115

больше 10 лет назад

Уязвимость средства криптографической защиты Bouncy Castle и операционной системы openSUSE, позволяющая нарушителю получить доступ к закрытому ключу

CVSS2: 5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2015-7940

The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."

CVSS2: 5
1%
Низкий
около 10 лет назад
redhat логотип
CVE-2015-7940

The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."

CVSS3: 3.7
1%
Низкий
больше 10 лет назад
nvd логотип
CVE-2015-7940

The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."

CVSS2: 5
1%
Низкий
около 10 лет назад
debian логотип
CVE-2015-7940

The Bouncy Castle Java library before 1.51 does not validate a point i ...

CVSS2: 5
1%
Низкий
около 10 лет назад
suse-cvrf логотип
openSUSE-SU-2015:1911-1

Security update for bouncycastle

1%
Низкий
больше 10 лет назад
github логотип
GHSA-4mv7-cq75-3qjm

Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

1%
Низкий
больше 7 лет назад
fstec логотип
BDU:2015-12115

Уязвимость средства криптографической защиты Bouncy Castle и операционной системы openSUSE, позволяющая нарушителю получить доступ к закрытому ключу

CVSS2: 5
1%
Низкий
больше 10 лет назад

Уязвимостей на страницу