ROBOT Attack

🗓️ 13 Dec 2017 02:10:53Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 21 Views

BouncyCastle vulnerability to ROBOT attack, TLS confidentiality breac

Reporter	Title	Published	Views	Family All 68
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Impact IBM Predictive Insights	8 Sep 202020:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Bouncy Castle Vulnerabilities Affect IBM Sterling B2B Integrator	13 Nov 202019:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence is affected by a Using Components with Known Vulnerabilities vulnerability	14 Oct 201916:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Bouncy Castle used by Logstash shipped with IBM Operations Analytics - Log Analysis (CVE-2017-13098)	21 Nov 202208:35	–	ibm
IBM Security Bulletins	Security Bulletin: Resilient is vulnerable to Using Components with Known Vulnerabilities	19 Apr 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Bouncy Castle as used by IBM QRadar SIEM contains multiple vulnerabilities (CVE-2018-1000613, CVE-2017-13098, CVE-2018-1000180)	5 Feb 202119:10	–	ibm
IBM Security Bulletins	Security Bulletin: Bouncy Castle Vulnerabilities Affect IBM Sterling B2B Integrator	6 Oct 202114:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling File Gateway is vulnerable to multiple issues due to Bouncy Castle	14 Oct 202221:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Public disclosed vulnerability from Bouncy Castle	28 Sep 201804:30	–	ibm

Vulners

Node

madgag bctls-jdk15onRange1.56.0.0–1.58.0.0java

bctls-jdk15on bctls-jdk15onRange1.57–1.58java

bcpkix-jdk15on bcpkix-jdk15onRange1.47–1.58java

bcprov-jdk15on bcprov-jdk15onRange1.46–1.58java

bouncycastle bouncycastleMatch1.8.0java

bctest-jdk15on bctest-jdk15onMatch1.58java

bcprov-ext-jdk15on bcprov-ext-jdk15onRange1.46–1.58java

bcpg-jdk15on bcpg-jdk15onRange1.46–1.58java

bcmail-jdk15on bcmail-jdk15onRange1.46–1.58java

Source	Link
github	www.github.com/bcgit/bc-java/commit/a00b684465b38d722ca9a3543b8af8568e6bad5c
securityfocus	www.securityfocus.com/bid/102195
debian	www.debian.org/security/2017/dsa-4072
security	www.security.netapp.com/advisory/ntap-20171222-0001/
oracle	www.oracle.com/security-alerts/cpuoct2020.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-05/msg00011.html
robotattack	www.robotattack.org/
kb	www.kb.cert.org/vuls/id/144389

21 Oct 2020 01:10Current

6.4Medium risk

Vulners AI Score6.4

CVSS 35.9 - 7.5

CVSS 24.3

EPSS0.24282