Package · Debian

bouncycastle

83 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

83 results · Feed

Medium —

CVE-2013-1624

Improper Input Validation in Bouncy Castle

The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote att…

bouncycastle org.bouncycastle:bcprov-jdk15on Debian Maven

Feb 8, 2013
Unscored —

CVE-2011-3389 Public exploit EPSS 73%

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firef…

asterisk curl bouncycastle nss Debian

Sep 6, 2011
High —

CVE-2007-6721

Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability

The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attr…

bouncycastle bouncycastle:bcprov-jdk15 bouncycastle:bcprov-jdk14 bouncycastle:bcprov-jdk16 Debian Maven

Mar 30, 2009