CVEvulnerability

CVE-2020-15522

5.9 MEDIUM Published 2021-05-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-05-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-362

Description

Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.

Affected configurations

• bouncycastle bc-csharp (< 1.8.7) • bouncycastle bouncy castle fips .net api (< 1.0.1.1) • bouncycastle fips java api (< 1.0.1.2) • bouncycastle fips java api (>= 1.0.2 < 1.0.2.1) • bouncycastle the bouncy castle crypto package for java (< 1.66)

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References