Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.bouncycastle/bcprov-jdk15@1.56
purl pkg:maven/org.bouncycastle/bcprov-jdk15@1.56
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (10)

Advisory Summary Aliases
GHSA-4vhj-98r6-424h
In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and … CVE-2016-1000338
GHSA-r97x-3g8f-gx3m
The Bouncy Castle JCE Provider carry a propagation bug In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a … CVE-2016-1000340
GHSA-r9ch-m4fh-fc7q
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature … CVE-2016-1000341
GHSA-qcj7-g2j5-g7r3
In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification In the Bouncy Castle … CVE-2016-1000342
GHSA-2j2x-hx4g-2gf4
In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode In the Bouncy Castle JCE Provider … CVE-2016-1000344
GHSA-fjqm-246c-mwqg
In Bouncy Castle JCE Provider the other party DH public key is not fully validated In the Bouncy Castle JCE … CVE-2016-1000346
GHSA-rrvx-pwf8-p59p
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values … CVE-2016-1000343
GHSA-c8xf-m4ff-jcxj
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 In the Bouncy Castle JCE Provider version 1.55 and earlier the primary … CVE-2016-1000339
GHSA-9gp4-qrff-c648
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES … CVE-2016-1000345
GHSA-w285-wf9q-5w69
In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode In the Bouncy Castle JCE Provider … CVE-2016-1000352