GHSA-m26p-m559-g5j5
Suggest an improvement- Source
- https://github.com/advisories/GHSA-m26p-m559-g5j5
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-m26p-m559-g5j5/GHSA-m26p-m559-g5j5.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-m26p-m559-g5j5
- Aliases
- Published
- 2022-05-01T18:45:52Z
- Modified
- 2023-11-08T03:56:49.596672Z
- Summary
- Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability
- Details
-
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
- Database specific
{ "nvd_published_at": "2009-03-30T01:30:00Z", "cwe_ids": [ "CWE-203" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-09-21T22:46:17Z" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2007-6721
- https://github.com/bcgit/bc-java
- https://web.archive.org/web/20071022023551/http://www.bouncycastle.org/csharp
- https://web.archive.org/web/20080316202318/http://www.bouncycastle.org:80/releasenotes.html
- http://www.bouncycastle.org/devmailarchive/msg08195.html
Affected packages
Maven / bouncycastle:bcprov-jdk14
Package
- Name
- bouncycastle:bcprov-jdk14
- View open source insights on deps.dev
- Purl
- pkg:maven/bouncycastle/bcprov-jdk14
Maven / bouncycastle:bcprov-jdk15
Package
- Name
- bouncycastle:bcprov-jdk15
- View open source insights on deps.dev
- Purl
- pkg:maven/bouncycastle/bcprov-jdk15
Maven / bouncycastle:bcprov-jdk16
Package
- Name
- bouncycastle:bcprov-jdk16
- View open source insights on deps.dev
- Purl
- pkg:maven/bouncycastle/bcprov-jdk16