bouncycastle vulnerabilities (Ubuntu)
79 vulnerabilities.
bouncycastleUbuntuUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.8.7 HighbouncycastleUbuntuPKIX draft CompositeVerifier accepts empty signature sequence as valid.6.3 MediumbouncycastleUbuntuNon-constant time comparisons risk private key leakage in FrodoKEM.8.9 HighbouncycastleUbuntuLDAP Injection Vulnerability in LDAPStoreHelper.java5.5 MediumbouncycastleUbuntuGOSTCTR implementation unable to process more than 255 blocks correctly9.3 CriticalbouncycastleUbuntuPossible DOS in processing large name constraint structures in PKIXCertPathReveiwer6.3 MediumbouncycastleUbuntuPossible DOS in processing specially formed ASN.1 Object Identifiers6.3 MediumbouncycastleUbuntuBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 HighbouncycastleUbuntuBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 HighbouncycastleUbuntuBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 MediumbouncycastleUbuntuBouncy Castle Java Cryptography API vulnerable to DNS poisoning7.5 HighbouncycastleUbuntuBouncy Castle Denial of Service (DoS)5.5 MediumbouncycastleUbuntuBouncy Castle For Java LDAP injection vulnerability5.3 MediumbouncycastleUbuntuTiming based private key exposure in Bouncy Castle5.9 MediumbouncycastleUbuntuObservable Differences in Behavior to Error Inputs in Bouncy Castle5.3 MediumbouncycastleUbuntuDeserialization of Untrusted Data in Bouncy castle9.8 CriticalbouncycastleUbuntuBouncy Castle has a flaw in the Low-level interface to RSA key pair generator7.5 HighbouncycastleUbuntuIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 HighbouncycastleUbuntuIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 HighbouncycastleUbuntuThe Bouncy Castle JCE Provider carry a propagation bug7.5 HighbouncycastleUbuntuIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 LowbouncycastleUbuntuModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumbouncycastleUbuntuIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 HighbouncycastleUbuntuIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 HighbouncycastleUbuntuModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumbouncycastleUbuntuModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 MediumbouncycastleUbuntuIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 HighbouncycastleUbuntuBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...3.3 LowbouncycastleUbuntuModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.0 Medium