CVE-2015-0886

CVE-2015-0886: Integer overflow in the crypt_raw function of jBCrypt’s key-stretching implementation (affecting versions before 0.4) can allow a remote attacker to more easily brute-force and determine cleartext values of password hashes associated with the maximum exponent. Impact is that passwo...