Поиск уязвимостей
Количество 7
Количество 7
GHSA-4vhj-98r6-424h
In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate
CVE-2016-1000338
In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.
CVE-2016-1000338
In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.
CVE-2016-1000338
In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.
CVE-2016-1000338
In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does no ...
ALT-PU-2017-3663
ALT-PU-2017-3663: package `bouncycastle` update to version 1.58-alt1_1jpp8
openSUSE-SU-2018:1689-1
Security update for bouncycastle
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-4vhj-98r6-424h In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate | CVSS3: 7.5 | 2% Низкий | около 8 лет назад |
 | CVE-2016-1000338 In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure. | CVSS3: 7.5 | 2% Низкий | больше 8 лет назад |
 | CVE-2016-1000338 In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure. | CVSS3: 4.8 | 2% Низкий | около 10 лет назад |
 | CVE-2016-1000338 In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure. | CVSS3: 7.5 | 2% Низкий | больше 8 лет назад |
| CVE-2016-1000338 In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does no ... | CVSS3: 7.5 | 2% Низкий | больше 8 лет назад |
| ALT-PU-2017-3663 ALT-PU-2017-3663: package `bouncycastle` update to version 1.58-alt1_1jpp8 | CVSS3: 7.5 | 2% Низкий | почти 9 лет назад |
 | openSUSE-SU-2018:1689-1 Security update for bouncycastle | больше 8 лет назад |
Уязвимостей на страницу