Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.bouncycastle/bcprov-jdk16@1.44
purl pkg:maven/org.bouncycastle/bcprov-jdk16@1.44
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.5
Vulnerabilities affecting this package (7)
Advisory Summary Fixed in package version
CVE-2016-1000346

In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. … There are no reported fixed by versions.
CVE-2019-17359

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant … There are no reported fixed by versions.
CVE-2015-6644

Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted … There are no reported fixed by versions.
CVE-2016-1000339

In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due … There are no reported fixed by versions.
GHSA-72m5-fvvv-55m6
Aliases:
CVE-2020-26939
Observable Differences in Behavior to Error Inputs in Bouncy Castle In Legion of the Bouncy Castle BC before 1.55 and … There are no reported fixed by versions.
GHSA-6xx3-rg99-gc3p
Aliases:
CVE-2020-15522
Timing based private key exposure in Bouncy Castle Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA … There are no reported fixed by versions.
GHSA-wjxj-5m7g-mg7q
Aliases:
CVE-2023-33202
Bouncy Castle Denial of Service (DoS) Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2018-1000180
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to …