CVE-2020-15522

CVE-2020-15522 affects Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2/1.0.2.1, and BC-FNA before 1.0.1.1. The issue is a timing side-channel in the EC math library that can reveal information about a private key when an attacker observes timing across multiple d...

CVE-2022-45146

CVE-2022-45146 affects the FIPS Java API in BC-FJA (Bouncy Castle) before 1.0.2.4. Changes to the JVM garbage collector in Java 13+ can cause temporary keys used by BC-FJA FIPS modules to be zeroed while still in use, leading to errors or potential information loss. Note: FIPS-certified Java vers...

CVE-2023-33202

CVE-2023-33202 : Bouncy Castle for Java before 1.73 contains a Denial of Service risk in PEMParser when parsing crafted ASN.1 data in OpenSSL PEM streams (X.509, PKCS8, PKCS7). The impact is an OutOfMemoryError leading to DoS. Affected: BC Java; BC-FJA 1.0.2.3 and earlier. Fix: BC Java 1.73+ or B...

CVE-2018-1000180

CVE-2018-1000180 affects Bouncy Castle BC 1.54–1.59 (and BC-FJA 1.0.0/1.0.1) with a flaw in the Low-level RSA key pair generator interface that may produce RSA key pairs with fewer Miller–Rabin primality tests than expected. IBM vulnerability bulletins associate this CVE with IBM products (e.g., ...

CVE-2020-26939

CVE-2020-26939 : Affects Legion of the Bouncy Castle BC (before 1.61) and BC-FJA (before 1.0.1.2). The OAEPEncoding path can leak information about the RSA private exponent when an invalid ciphertext decrypts to a short payload, via early exceptions in the OAEP decoder. Consequence is partial dis...