CVE-2017-13098

🗓️ 13 Dec 2017 01:00:00Reported by certccType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 194 Views

BouncyCastle TLS prior to version 1.0.3, weak Bleichenbacher oracl

Reporter	Title	Published	Views	Family All 67
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Impact IBM Predictive Insights	8 Sep 202020:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Bouncy Castle Vulnerabilities Affect IBM Sterling B2B Integrator	13 Nov 202019:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence is affected by a Using Components with Known Vulnerabilities vulnerability	14 Oct 201916:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Bouncy Castle used by Logstash shipped with IBM Operations Analytics - Log Analysis (CVE-2017-13098)	21 Nov 202208:35	–	ibm
IBM Security Bulletins	Security Bulletin: Resilient is vulnerable to Using Components with Known Vulnerabilities	19 Apr 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Bouncy Castle as used by IBM QRadar SIEM contains multiple vulnerabilities (CVE-2018-1000613, CVE-2017-13098, CVE-2018-1000180)	5 Feb 202119:10	–	ibm
IBM Security Bulletins	Security Bulletin: Bouncy Castle Vulnerabilities Affect IBM Sterling B2B Integrator	6 Oct 202114:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling File Gateway is vulnerable to multiple issues due to Bouncy Castle	14 Oct 202221:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Public disclosed vulnerability from Bouncy Castle	28 Sep 201804:30	–	ibm

NVD

Node

bouncycastle bc-javaRange<1.59

[
  {
    "platforms": [
      "all"
    ],
    "product": "BouncyCastle TLS",
    "vendor": "Legion of the Bouncy Castle",
    "versions": [
      {
        "status": "affected",
        "version": "<1.0.3"
      }
    ]
  }
]

Source	Link
debian	www.debian.org/security/2017/dsa-4072
lists	www.lists.opensuse.org/opensuse-security-announce/2020-05/msg00011.html
robotattack	www.robotattack.org/
securityfocus	www.securityfocus.com/bid/102195
kb	www.kb.cert.org/vuls/id/144389
oracle	www.oracle.com/security-alerts/cpuoct2020.html
security	www.security.netapp.com/advisory/ntap-20171222-0001/
github	www.github.com/bcgit/bc-java/commit/a00b684465b38d722ca9a3543b8af8568e6bad5c

13 May 2026 00:24Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 35.9 - 7.5

EPSS0.68141

CWE-203