Lucene search
Ubuntu.comUB:CVE-2015-7940HistoryNov 09, 2015 - 12:00 a.m.
CVE-2015-7940
2015-11-0900:00:00
ubuntu.com
ubuntu.com
7
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
64.2%
The Bouncy Castle Java library before 1.51 does not validate a point is
withing the elliptic curve, which makes it easier for remote attackers to
obtain private keys via a series of crafted elliptic curve Diffie Hellman
(ECDH) key exchanges, aka an “invalid curve attack.”
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | no reverse depends in main |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 14.04 | noarch | bouncycastle | < 1.49+dfsg-2ubuntu0.1 | UNKNOWN |
Related
osv
osv
bouncycastle - security update
2015-12-08 00:00:00
debiancve
debiancve
CVE-2015-7940
2015-11-09 16:59:00
nessus
nessus
Oracle JDeveloper Information Disclosure Vulnerability (July 2018 CPU)
2018-07-25 00:00:00
Debian DLA-361-1 : bouncycastle security update
2015-12-09 00:00:00
Debian DSA-3417-1 : bouncycastle - security update
2015-12-15 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-361-1)
2023-03-08 00:00:00
openSUSE: Security Advisory for bouncycastle (openSUSE-SU-2015:1911-1)
2015-11-05 00:00:00
Debian Security Advisory DSA 3417-1 (bouncycastle - security update)
2015-12-14 00:00:00
github
github
debian
debian
[SECURITY] [DLA 361-1] bouncycastle security update
2015-12-08 11:28:10
[SECURITY] [DSA 3417-1] bouncycastle security update
2015-12-14 12:51:06
[SECURITY] [DSA 3417-1] bouncycastle security update
2015-12-14 12:51:06
suse
suse
Security update for bouncycastle (important)
2015-11-04 17:17:31
fedora
fedora
[SECURITY] Fedora 22 Update: bouncycastle-1.50-8.fc22
2016-01-04 19:58:14
f5
f5
K10105323 : Java Bouncy Castle vulnerability CVE-2015-7940
2018-05-22 00:00:00
ibm
ibm
cve
cve
CVE-2015-7940
2015-11-09 16:59:00
mageia
mageia
Updated bouncycastle packages fix security vulnerability
2015-12-28 22:23:26
prion
prion
Information disclosure
2015-11-09 16:59:00
redhat
redhat
(RHSA-2016:2036) Important: Red Hat JBoss A-MQ 6.3 security update
2016-10-06 16:16:19
(RHSA-2016:2035) Important: Red Hat JBoss Fuse 6.3 security update
2016-10-06 16:16:07
ubuntu
ubuntu
Bouncy Castle vulnerabilities
2018-08-01 00:00:00
atlassian
atlassian
Upgrade Bouncy Castle to fix multiple CVEs
2020-02-21 08:37:09
Upgrade Bouncy Castle to fix multiple CVEs
2020-02-21 08:37:09
oracle
oracle
Oracle Critical Patch Update - April 2018
2018-04-17 00:00:00
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
64.2%
Related for UB:CVE-2015-7940