2 matches found
Bouncy Castle FrodoEngine Java Disclosure
The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library relates to the use of hidden time channels for data transmission. Exploiting this vulnerability allows a remote attacker to disclose the protected information...
7.8CVSS7.4AI score0.0096EPSS
SaveExploits0References5Affected Software3
GHSA-P93R-85WP-75V3 Bouncy Castle Has Covert Timing Channel Vulnerability
Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all core modules. This vulnerability is associated with program files FrodoEngine.Java. This issue only affects users of the FrodoKEM algorithm involved in the decryption of encapsulations. This issue affects...
9.9CVSS7.2AI score0.0096EPSS
SaveExploits0References6
20