bouncycastle vulnerabilities (openSUSE)
74 vulnerabilities.
bouncycastleopenSUSEGOSTCTR implementation unable to process more than 255 blocks correctly9.3 CriticalbouncycastleopenSUSEBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 HighbouncycastleopenSUSEBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 HighbouncycastleopenSUSEBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 MediumbouncycastleopenSUSEPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumbouncycastleopenSUSEBouncy Castle For Java LDAP injection vulnerability5.3 MediumbouncycastleopenSUSETiming based private key exposure in Bouncy Castle5.9 MediumbouncycastleopenSUSELogic error in Legion of the Bouncy Castle BC Java8.1 HighbouncycastleopenSUSEOut-of-Memory Error in Bouncy Castle Crypto7.5 HighbouncycastleopenSUSEDeserialization of Untrusted Data in Bouncy castle9.8 CriticalbouncycastleopenSUSEBouncy Castle has a flaw in the Low-level interface to RSA key pair generator7.5 HighbouncycastleopenSUSEIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 HighbouncycastleopenSUSEIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 HighbouncycastleopenSUSEThe Bouncy Castle JCE Provider carry a propagation bug7.5 HighbouncycastleopenSUSEIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 LowbouncycastleopenSUSEModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumbouncycastleopenSUSEIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 HighbouncycastleopenSUSEIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 HighbouncycastleopenSUSEModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumbouncycastleopenSUSEModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 MediumbouncycastleopenSUSEIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 HighbouncycastleopenSUSEBouncyCastle JCE TLS Bleichenbacher/ROBOT7.5 HighbouncycastleopenSUSEMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...5.9 MediumbouncycastleopenSUSEModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.0 Medium