CVE-2016-1000352

Source
https://nvd.nist.gov/vuln/detail/CVE-2016-1000352
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1000352.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-1000352
Aliases
Downstream
Related
Published
2018-06-04T21:29:00Z
Modified
2025-08-09T19:01:28Z
Severity
  • 7.4 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

In the Bouncy Castle JCE Provider version 1.55 and earlier the ECIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

References

Affected packages

Git / github.com/bcgit/bc-java

Affected ranges

Type
GIT
Repo
https://github.com/bcgit/bc-java
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed