In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2016-1000344 · ADVISORY
• bcgit/bc-java commit 9385b0e · WEB
• access.redhat.com/errata/RHSA-2018:2669 · WEB
• access.redhat.com/errata/RHSA-2018:2927 · WEB
• GitHub Advisory GHSA-2j2x-hx4g-2gf4 · ADVISORY
• security.netapp.com/advisory/ntap-20181127-0004 · WEB
• oracle.com/security-alerts/cpuoct2020.html · WEB
• security.netapp.com/advisory/ntap-20181127-0004

org.bouncycastle:bcprov-jdk14 のその他の脆弱性

• CVE-2026-5598高 7.5Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associat…
• CVE-2026-0636中 6.5Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JA…
• CVE-2025-14813高 7.5: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). …
• CVE-2025-8885中 6.3Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), …
• CVE-2024-30172高 7.5An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a craf…