GitHub Advisoryadvisory · Maven

GHSA-wrwf-pmmj-w989 Observable Discrepancy in BouncyCastle

MEDIUM Published 2022-05-13 Modified 2022-07-01 Official page ↗
Aliases
CVE-2017-13098
Ecosystem
Maven
Packages
org.bouncycastle:bcprov-jdk15on
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-203
Reviewed
2022-07-01

Affected packages

• Maven org.bouncycastle:bcprov-jdk15on: < 1.0.3 → fixed in 1.0.3

Description

BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."

Related

Alias · CVE (1)

  • CVE-2017-13098 BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides… vulnerability

Weakness · CWE (1)

  • CWE-203 Observable Discrepancy weakness

References