Skip to content
OpenAdvisories

Archive

13 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /13 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2017-13099 Public exploit EPSS 27%

    wolfSSL Bleichenbacher/ROBOT

    wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as "ROBOT."

    wolfSSL wolfSSL wolfssl wolfssl Debian Ubuntu
  • High 7.5
    CVE-2017-13098 Public exploit EPSS 24%

    BouncyCastle JCE TLS Bleichenbacher/ROBOT

    BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover th…

    Legion of the Bouncy Castle BouncyCastle TLS bouncycastle org.bouncycastle:bcprov-jdk15on Debian Maven