Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2021/04/22 4:16 p.m.72 views

Observable Differences in Behavior to Error Inputs in Bouncy Castle

In Legion of the Bouncy Castle BC before 1.55 and BC-FJA before 1.0.2, attackers can obtain sensitive information about a private exponent because of Observable Differences in Behavior to Error Inputs. This occurs in org.bouncycastle.crypto.encodings.OAEPEncoding. Sending invalid ciphertext that...

5.3CVSS5.5AI score0.00925EPSS
SaveExploits0References8Affected Software8
Rows per page
Query Builder