Integer Overflow or Wraparound in JBCrypt

MEDIO 5.0CVE-2015-0886 · GHSA-9h6p-92jq-888x · Published 28/02/2015 · updated 17/06/2026

En resumen

CVE-2015-0886 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a org.mindrot:jbcrypt, jbcrypt (mindrot).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.8%, mayor que el 92.0% de las vulnerabilidades.
Solución: actualizar a 0.4 o posterior.

Package	Affected versions	Patched versions
org.mindrot:jbcrypt Maven	`< 0.4`	`0.4`
jbcrypt mindrot	`< 0.4`	`0.4`

Description

Integer overflow in the crypt_raw method in the key-stretching implementation in JBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.

NVD description

Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free