Search for packages
| purl | pkg:maven/org.bouncycastle/bcprov-jdk15@1.46 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2016-1000342
|
In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on … | There are no reported fixed by versions. |
|
CVE-2016-1000345
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For … | There are no reported fixed by versions. |
|
CVE-2016-1000346
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. … | There are no reported fixed by versions. |
|
CVE-2019-17359
|
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant … | There are no reported fixed by versions. |
|
CVE-2016-1000341
|
In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings … | There are no reported fixed by versions. |
|
CVE-2016-1000338
|
In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on … | There are no reported fixed by versions. |
|
CVE-2015-6644
|
Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted … | There are no reported fixed by versions. |
|
CVE-2016-1000339
|
In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due … | There are no reported fixed by versions. |
|
GHSA-4mv7-cq75-3qjm
Aliases: CVE-2015-7940 |
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 The Bouncy Castle Java library before 1.51 does not validate a point … | There are no reported fixed by versions. |
|
GHSA-4vhj-98r6-424h
Aliases: CVE-2016-1000338 |
In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and … | There are no reported fixed by versions. |
|
GHSA-72m5-fvvv-55m6
Aliases: CVE-2020-26939 |
Observable Differences in Behavior to Error Inputs in Bouncy Castle In Legion of the Bouncy Castle BC before 1.55 and … | There are no reported fixed by versions. |
|
GHSA-6xx3-rg99-gc3p
Aliases: CVE-2020-15522 |
Timing based private key exposure in Bouncy Castle Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA … | There are no reported fixed by versions. |
|
GHSA-r9ch-m4fh-fc7q
Aliases: CVE-2016-1000341 |
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature … | There are no reported fixed by versions. |
|
GHSA-qcj7-g2j5-g7r3
Aliases: CVE-2016-1000342 |
In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification In the Bouncy Castle … | There are no reported fixed by versions. |
|
GHSA-2j2x-hx4g-2gf4
Aliases: CVE-2016-1000344 |
In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode In the Bouncy Castle JCE Provider … | There are no reported fixed by versions. |
|
GHSA-fjqm-246c-mwqg
Aliases: CVE-2016-1000346 |
In Bouncy Castle JCE Provider the other party DH public key is not fully validated In the Bouncy Castle JCE … | There are no reported fixed by versions. |
|
GHSA-rrvx-pwf8-p59p
Aliases: CVE-2016-1000343 |
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values … | There are no reported fixed by versions. |
|
GHSA-c8xf-m4ff-jcxj
Aliases: CVE-2016-1000339 |
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 In the Bouncy Castle JCE Provider version 1.55 and earlier the primary … | There are no reported fixed by versions. |
|
GHSA-xqj7-j8j5-f2xr
Aliases: CVE-2018-1000180 |
Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator Bouncy Castle BC 1.54 - 1.59, … | There are no reported fixed by versions. |
|
GHSA-9gp4-qrff-c648
Aliases: CVE-2016-1000345 |
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES … | There are no reported fixed by versions. |
|
GHSA-w285-wf9q-5w69
Aliases: CVE-2016-1000352 |
In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode In the Bouncy Castle JCE Provider … | There are no reported fixed by versions. |
|
CVE-2018-1000613
Aliases: GHSA-4446-656p-f54g |
Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 … | There are no reported fixed by versions. |
|
GHSA-wjxj-5m7g-mg7q
Aliases: CVE-2023-33202 |
Bouncy Castle Denial of Service (DoS) Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2018-1000180
|
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to … |