All products

Red Hat JBoss Fuse 6/bouncycastle

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Bouncy Castle For Java LDAP injection vulnerabilityCVE-2023-33201 · GHSA-HR8G-6V94-X4M9 org.bouncycastle:bcprov-debug-jdk14org.bouncycastle:bcprov-debug-jdk15on MavenRed Hat Medium Fix reported
In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB modeCVE-2016-1000344 · GHSA-2J2X-HX4G-2GF4 org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15 MavenRed Hat High Fix reported
In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validateCVE-2016-1000338 · GHSA-4VHJ-98R6-424H org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15 MavenRed Hat High Fix reported
The Bouncy Castle JCE Provider carry a propagation bugCVE-2016-1000340 · GHSA-R97X-3G8F-GX3M org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15 MavenRed Hat High Fix reported
In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB modeCVE-2016-1000352 · GHSA-W285-WF9Q-5W69 org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15 MavenRed Hat High Fix reported
In Bouncy Castle JCE Provider the other party DH public key is not fully validatedCVE-2016-1000346 · GHSA-FJQM-246C-MWQG org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15 MavenRed Hat Low Fix reported
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15CVE-2016-1000339 · GHSA-C8XF-M4FF-JCXJ org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15 MavenRed Hat Medium Fix reported
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15CVE-2016-1000345 · GHSA-9GP4-QRFF-C648 org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15 MavenRed Hat Medium Fix reported
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default valuesCVE-2016-1000343 · GHSA-RRVX-PWF8-P59P org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15 MavenRed Hat High Fix reported
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15CVE-2016-1000341 · GHSA-R9CH-M4FH-FC7Q org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15 MavenRed Hat Medium Fix reported
Bouncy Castle has a flaw in the Low-level interface to RSA key pair generatorCVE-2018-1000180 · GHSA-XQJ7-J8J5-F2XR org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15 MavenRed Hat High Fix reported
In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verificationCVE-2016-1000342 · GHSA-QCJ7-G2J5-G7R3 org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15 MavenRed Hat High Fix reported