High DSA-4072-1 1 CVE

bouncycastle - security update

Published Dec 21, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	bouncycastle	1.56-1+deb9u1

Vulnerabilities 1

High 7.5

CVE-2017-13098 Public exploit EPSS 24%

BouncyCastle JCE TLS Bleichenbacher/ROBOT

BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover th…

Legion of the Bouncy Castle BouncyCastle TLS bouncycastle org.bouncycastle:bcprov-jdk15on Debian Maven

Dec 13, 2017