org.bouncycastle:bcprov-jdk14 vulnerabilities (Maven)
26 vulnerabilities.
org.bouncycastle:bcprov-jdk14MavenNon-constant time comparisons risk private key leakage in FrodoKEM.8.9 Highorg.bouncycastle:bcprov-jdk14MavenLDAP Injection Vulnerability in LDAPStoreHelper.java5.5 Mediumorg.bouncycastle:bcprov-jdk14MavenGOSTCTR implementation unable to process more than 255 blocks correctly9.3 Criticalorg.bouncycastle:bcprov-jdk14MavenPossible DOS in processing specially formed ASN.1 Object Identifiers6.3 Mediumorg.bouncycastle:bcprov-jdk14MavenBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Highorg.bouncycastle:bcprov-jdk14MavenBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 Highorg.bouncycastle:bcprov-jdk14MavenBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Mediumorg.bouncycastle:bcprov-jdk14MavenBouncy Castle Java Cryptography API vulnerable to DNS poisoning7.5 Highorg.bouncycastle:bcprov-jdk14MavenBouncy Castle Denial of Service (DoS)5.5 Mediumorg.bouncycastle:bcprov-jdk14MavenBouncy Castle For Java LDAP injection vulnerability5.3 Mediumorg.bouncycastle:bcprov-jdk14MavenTiming based private key exposure in Bouncy Castle5.9 Mediumorg.bouncycastle:bcprov-jdk14MavenLogic error in Legion of the Bouncy Castle BC Java8.1 Highorg.bouncycastle:bcprov-jdk14MavenObservable Differences in Behavior to Error Inputs in Bouncy Castle5.3 Mediumorg.bouncycastle:bcprov-jdk14MavenOut-of-Memory Error in Bouncy Castle Crypto7.5 Highorg.bouncycastle:bcprov-jdk14MavenBouncy Castle has a flaw in the Low-level interface to RSA key pair generator7.5 Highorg.bouncycastle:bcprov-jdk14MavenIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 Highorg.bouncycastle:bcprov-jdk14MavenIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 Highorg.bouncycastle:bcprov-jdk14MavenThe Bouncy Castle JCE Provider carry a propagation bug7.5 Highorg.bouncycastle:bcprov-jdk14MavenIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 Loworg.bouncycastle:bcprov-jdk14MavenModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 Mediumorg.bouncycastle:bcprov-jdk14MavenIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 Highorg.bouncycastle:bcprov-jdk14MavenIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 Highorg.bouncycastle:bcprov-jdk14MavenModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 Mediumorg.bouncycastle:bcprov-jdk14MavenModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 Mediumorg.bouncycastle:bcprov-jdk14MavenIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 Highorg.bouncycastle:bcprov-jdk14MavenModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.0 Medium