bouncycastle vulnerabilities (Debian)
83 vulnerabilities.
bouncycastleDebianLDAP Injection Vulnerability in LDAPStoreHelper.java5.5 MediumbouncycastleDebianBouncy Castle Vulnerable to Uncontrolled Resource Consumption5.9 MediumbouncycastleDebianPossible DOS in processing large name constraint structures in PKIXCertPathReveiwer6.3 MediumbouncycastleDebianPossible DOS in processing specially formed ASN.1 Object Identifiers6.3 MediumbouncycastleDebianBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 HighbouncycastleDebianBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 HighbouncycastleDebianBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 MediumbouncycastleDebianBouncy Castle Java Cryptography API vulnerable to DNS poisoning7.5 HighbouncycastleDebianBouncy Castle Denial of Service (DoS)5.5 MediumbouncycastleDebianBouncy Castle For Java LDAP injection vulnerability5.3 MediumbouncycastleDebianTiming based private key exposure in Bouncy Castle5.9 MediumbouncycastleDebianLogic error in Legion of the Bouncy Castle BC Java8.1 HighbouncycastleDebianObservable Differences in Behavior to Error Inputs in Bouncy Castle5.3 MediumbouncycastleDebianDeserialization of Untrusted Data in Bouncy castle9.8 CriticalbouncycastleDebianBouncy Castle has a flaw in the Low-level interface to RSA key pair generator7.5 HighbouncycastleDebianIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 HighbouncycastleDebianIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 HighbouncycastleDebianThe Bouncy Castle JCE Provider carry a propagation bug7.5 HighbouncycastleDebianIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 LowbouncycastleDebianModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumbouncycastleDebianIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 HighbouncycastleDebianIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 HighbouncycastleDebianModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumbouncycastleDebianModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 MediumbouncycastleDebianIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 HighbouncycastleDebianBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions4.4 MediumbouncycastleDebianBouncyCastle JCE TLS Bleichenbacher/ROBOT7.5 HighbouncycastleDebianBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...3.3 LowbouncycastleDebianModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.0 MediumbouncycastleDebianImproper Input Validation in Bouncy Castle4.0 MediumbouncycastleDebianThe TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...2.6 LowbouncycastleDebianThe SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet...4.3 MediumbouncycastleDebianLegion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability10.0 High