org.bouncycastle:bcprov-jdk15on vulnerabilities (Maven)
25 vulnerabilities.
org.bouncycastle:bcprov-jdk15onMavenGOSTCTR implementation unable to process more than 255 blocks correctly9.3 Criticalorg.bouncycastle:bcprov-jdk15onMavenBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Highorg.bouncycastle:bcprov-jdk15onMavenBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Mediumorg.bouncycastle:bcprov-jdk15onMavenBouncy Castle Java Cryptography API vulnerable to DNS poisoning7.5 Highorg.bouncycastle:bcprov-jdk15onMavenBouncy Castle Denial of Service (DoS)5.5 Mediumorg.bouncycastle:bcprov-jdk15onMavenBouncy Castle For Java LDAP injection vulnerability5.3 Mediumorg.bouncycastle:bcprov-jdk15onMavenTiming based private key exposure in Bouncy Castle5.9 Mediumorg.bouncycastle:bcprov-jdk15onMavenLogic error in Legion of the Bouncy Castle BC Java8.1 Highorg.bouncycastle:bcprov-jdk15onMavenObservable Differences in Behavior to Error Inputs in Bouncy Castle5.3 Mediumorg.bouncycastle:bcprov-jdk15onMavenDeserialization of Untrusted Data in Bouncy castle9.8 Criticalorg.bouncycastle:bcprov-jdk15onMavenBouncy Castle has a flaw in the Low-level interface to RSA key pair generator7.5 Highorg.bouncycastle:bcprov-jdk15onMavenIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 Highorg.bouncycastle:bcprov-jdk15onMavenIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 Highorg.bouncycastle:bcprov-jdk15onMavenThe Bouncy Castle JCE Provider carry a propagation bug7.5 Highorg.bouncycastle:bcprov-jdk15onMavenIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 Loworg.bouncycastle:bcprov-jdk15onMavenModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 Mediumorg.bouncycastle:bcprov-jdk15onMavenIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 Highorg.bouncycastle:bcprov-jdk15onMavenIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 Highorg.bouncycastle:bcprov-jdk15onMavenModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 Mediumorg.bouncycastle:bcprov-jdk15onMavenModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 Mediumorg.bouncycastle:bcprov-jdk15onMavenIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 Highorg.bouncycastle:bcprov-jdk15onMavenBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions4.4 Mediumorg.bouncycastle:bcprov-jdk15onMavenBouncyCastle JCE TLS Bleichenbacher/ROBOT7.5 Highorg.bouncycastle:bcprov-jdk15onMavenModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.0 Mediumorg.bouncycastle:bcprov-jdk15onMavenImproper Input Validation in Bouncy Castle4.0 Medium