Lucene search
GoogleOSV:GHSA-2J2X-HX4G-2GF4HistoryOct 18, 2018 - 5:43 p.m.
In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode
2018-10-1817:43:55
Google
osv.dev
13
EPSS
0.002
Percentile
56.4%
In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.
References
access.redhat.com/errata/RHSA-2018:2669
access.redhat.com/errata/RHSA-2018:2927
github.com/advisories/GHSA-2j2x-hx4g-2gf4
github.com/bcgit/bc-java/commit/9385b0ebd277724b167fe1d1456e3c112112be1f
nvd.nist.gov/vuln/detail/CVE-2016-1000344
security.netapp.com/advisory/ntap-20181127-0004
www.oracle.com/security-alerts/cpuoct2020.html
Related
nvd
nvd
CVE-2016-1000344
2018-06-04 21:29:00
debiancve
debiancve
CVE-2016-1000344
2018-06-04 21:29:00
cve
cve
CVE-2016-1000344
2018-06-04 21:29:00
prion
prion
Design/Logic Flaw
2018-06-04 21:29:00
ubuntucve
ubuntucve
CVE-2016-1000344
2018-06-04 00:00:00
cvelist
cvelist
CVE-2016-1000344
2018-06-04 21:00:00
veracode
veracode
Unsafe Encryption Scheme
2017-01-13 10:20:52
github
github
atlassian
atlassian
Upgrade Bouncy Castle to fix multiple CVEs
2020-02-21 08:37:09
Upgrade Bouncy Castle to fix multiple CVEs
2020-02-21 08:37:09
suse
suse
Security update for bouncycastle (moderate)
2018-06-14 12:07:50
nessus
nessus
openSUSE Security Update : bouncycastle (openSUSE-2018-628)
2018-06-14 00:00:00
RHEL 7 : Satellite Server (RHSA-2018:2927)
2018-10-18 00:00:00
openvas
openvas
openSUSE: Security Advisory for bouncycastle (openSUSE-SU-2018:1689-1)
2018-06-15 00:00:00
Mageia: Security Advisory (MGASA-2018-0376)
2022-01-28 00:00:00
ibm
ibm
mageia
mageia
Updated bouncycastle packages fix security vulnerabilities
2018-09-21 02:17:55
redhat
redhat
(RHSA-2018:2669) Important: Fuse 7.1 security update
2018-09-11 07:52:48
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00