In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2016-1000352 · ADVISORY
• bcgit/bc-java commit 9385b0e · WEB
• access.redhat.com/errata/RHSA-2018:2669 · WEB
• access.redhat.com/errata/RHSA-2018:2927 · WEB
• GitHub Advisory GHSA-w285-wf9q-5w69 · ADVISORY
• bcgit/bc-java · PACKAGE
• security.netapp.com/advisory/ntap-20181127-0004 · WEB
• oracle.com/security-alerts/cpuoct2020.html · WEB
• security.netapp.com/advisory/ntap-20181127-0004

Lỗ hổng khác của org.bouncycastle:bcprov-jdk14

• CVE-2026-5598CAO 7.5Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associat…
• CVE-2026-0636TRUNG BÌNH 6.5Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JA…
• CVE-2025-14813CAO 7.5: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). …
• CVE-2025-8885TRUNG BÌNH 6.3Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), …
• CVE-2024-30172CAO 7.5An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a craf…