Search for packages
purl | pkg:maven/org.bouncycastle/bcprov-jdk15@1.44 |
Next non-vulnerable version | None. |
Latest non-vulnerable version | None. |
Risk | 4.5 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-2u2e-ux7t-aaar
Aliases: CVE-2020-15522 GHSA-6xx3-rg99-gc3p |
Timing based private key exposure in Bouncy Castle |
Affected by 0 other vulnerabilities. |
VCID-4fxt-kkh8-aaan
Aliases: CVE-2016-1000342 GHSA-qcj7-g2j5-g7r3 |
In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification |
Affected by 0 other vulnerabilities. |
VCID-5nqk-znrf-aaab
Aliases: CVE-2016-1000341 GHSA-r9ch-m4fh-fc7q |
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 |
Affected by 0 other vulnerabilities. |
VCID-9c29-3454-aaab
Aliases: CVE-2016-1000339 GHSA-c8xf-m4ff-jcxj |
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 |
Affected by 0 other vulnerabilities. |
VCID-9jcc-2gjw-aaae
Aliases: CVE-2016-1000346 GHSA-fjqm-246c-mwqg |
In Bouncy Castle JCE Provider the other party DH public key is not fully validated |
Affected by 0 other vulnerabilities. |
VCID-9vzw-cb96-aaaq
Aliases: CVE-2018-1000613 GHSA-4446-656p-f54g |
Deserialization of Untrusted Data in Bouncy castle |
Affected by 0 other vulnerabilities. |
VCID-hxm6-fgzs-aaam
Aliases: CVE-2016-1000344 GHSA-2j2x-hx4g-2gf4 |
In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode |
Affected by 0 other vulnerabilities. |
VCID-ja9x-8z86-aaag
Aliases: CVE-2016-1000338 GHSA-4vhj-98r6-424h |
In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate |
Affected by 0 other vulnerabilities. |
VCID-jesj-cmj4-aaag
Aliases: CVE-2015-7940 GHSA-4mv7-cq75-3qjm |
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 |
Affected by 1 other vulnerability. |
VCID-nd3n-xrcv-aaan
Aliases: CVE-2016-1000352 GHSA-w285-wf9q-5w69 |
In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode |
Affected by 0 other vulnerabilities. |
VCID-r5ac-x57y-aaap
Aliases: CVE-2016-1000345 GHSA-9gp4-qrff-c648 |
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 |
Affected by 0 other vulnerabilities. |
VCID-tt54-7vmn-aaaj
Aliases: CVE-2023-33202 GHSA-wjxj-5m7g-mg7q |
Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM encoded streams containing X.509 certificates, PKCS8 encoded keys, and PKCS7 objects. Parsing a file that has crafted ASN.1 data through the PEMParser causes an OutOfMemoryError, which can enable a denial of service attack. (For users of the FIPS Java API: BC-FJA 1.0.2.3 and earlier are affected; BC-FJA 1.0.2.4 is fixed.) |
Affected by 0 other vulnerabilities. |
VCID-x6rq-m1e2-aaab
Aliases: CVE-2020-26939 GHSA-72m5-fvvv-55m6 |
Observable Differences in Behavior to Error Inputs in Bouncy Castle |
Affected by 0 other vulnerabilities. |
VCID-ywq5-t9hj-aaaf
Aliases: CVE-2018-1000180 GHSA-xqj7-j8j5-f2xr |
Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator |
Affected by 0 other vulnerabilities. |
VCID-zwyg-ab9c-aaab
Aliases: CVE-2016-1000343 GHSA-rrvx-pwf8-p59p |
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |