Search CVE reports


Toggle filters

71 – 74 of 74 results


CVE-2015-6644

Low priority

Some fixes available 1 of 4

Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 24106146.

1 affected package

bouncycastle

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bouncycastle Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2015-7940

Low priority

Some fixes available 1 of 6

The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key...

1 affected package

bouncycastle

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bouncycastle — — — — Not affected
Show less packages

CVE-2007-6755

Low priority
Ignored

The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might...

10 affected packages

bouncycastle, gnutls26, gnutls28, libgcrypt11, mbedtls...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bouncycastle — — — — Not affected
gnutls26 — — — — Not in release
gnutls28 — — — — Not affected
libgcrypt11 — — — — Not in release
mbedtls — — — — Not affected
nss — — — — Not affected
openssl — — — — Not affected
openssl098 — — — — Not in release
polarssl — — — — Not in release
python-crypto — — — — Not affected
Show all 10 packages Show less packages

CVE-2013-1624

Low priority
Ignored

The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC...

1 affected package

bouncycastle

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bouncycastle — — — — —
Show less packages