Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

maven org.bouncycastle:bcprov-jdk14 Security Advisories

Browse all Security Advisories for maven org.bouncycastle:bcprov-jdk14

Loading...
Moderate
GSA_kwCzR0hTQS1tNDRqLWNmcm0tZzhxY84AA76G
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
Ecosystems: nuget, maven
Packages: BouncyCastle.Cryptography, BouncyCastle, org.bouncycastle:bctls-jdk15to18, org.bouncycastle:bctls-jdk14, org.bouncycastle:bctls-jdk18on, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk18on
Source: GitHub Advisory Database
Blast Radius: 23.7
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS12NDM1LXhjOHgtd3ZyOc4AA76H
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")
Ecosystems: nuget, maven
Packages: BouncyCastle.Cryptography, BouncyCastle, org.bouncycastle:bctls-jdk15to18, org.bouncycastle:bctls-jdk14, org.bouncycastle:bctls-jdk18on, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bctls-fips
Source: GitHub Advisory Database
Blast Radius: 26.2
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS04eGZjLWdtNmctdmdwds4AA75b
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
Ecosystems: nuget, maven
Packages: BouncyCastle.Cryptography, BouncyCastle, org.bouncycastle:bc-fips, org.bouncycastle:bctls-jdk15to18, org.bouncycastle:bctls-jdk14, org.bouncycastle:bctls-jdk18on, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk18on
Source: GitHub Advisory Database
Blast Radius: 23.7
Published: 6 months ago
Low
GSA_kwCzR0hTQS00aDhmLTJ3dngtZ2c1d84AA7vg
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk12, org.bouncycastle:bcprov-jdk13, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk18on
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 7 months ago
Moderate
GSA_kwCzR0hTQS13anhqLTVtN2ctbWc3cc4AA3WZ
Bouncy Castle Denial of Service (DoS)
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk16, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-ext-jdk16, org.bouncycastle:bcprov-ext-jdk15on, org.bouncycastle:bcpkix-jdk18on, org.bouncycastle:bcprov-jdk18on
Source: GitHub Advisory Database
Blast Radius: 23.5
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1ocjhnLTZ2OTQteDRtOc4AA0NP
Bouncy Castle For Java LDAP injection vulnerability
Ecosystems: maven
Packages: org.bouncycastle:bcprov-debug-jdk15on, org.bouncycastle:bcprov-ext-jdk15on, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-debug-jdk14, org.bouncycastle:bcprov-ext-jdk14, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-debug-jdk18on, org.bouncycastle:bcprov-debug-jdk15to18, org.bouncycastle:bcprov-ext-jdk18on, org.bouncycastle:bcprov-ext-jdk15to18, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk18on
Source: GitHub Advisory Database
Blast Radius: 22.7
Published: over 1 year ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4eDMtcmc5OS1nYzNw
Timing based private key exposure in Bouncy Castle
Ecosystems: nuget, maven
Packages: BouncyCastle, org.bouncycastle:bcprov-jdk16, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-ext-jdk16, org.bouncycastle:bcprov-ext-jdk15on, org.bouncycastle:bc-fips
Source: GitHub Advisory Database
Blast Radius: 22.8
Published: over 3 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTczeHYtdzVncC1mcnho
Logic error in Legion of the Bouncy Castle BC Java
Ecosystems: maven
Packages: org.bouncycastle:bcprov-ext-jdk16, org.bouncycastle:bcprov-jdk16, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-ext-jdk15on, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk15to18
Source: GitHub Advisory Database
Blast Radius: 34.6
Published: over 3 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTcybTUtZnZ2di01NW02
Observable Differences in Behavior to Error Inputs in Bouncy Castle
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-ext-jdk16, org.bouncycastle:bcprov-ext-jdk15on, org.bouncycastle:bc-fips, org.bouncycastle:bcprov-jdk16, org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 22.7
Published: over 3 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJtaDgtZ3gybS1tcjc1
Out-of-Memory Error in Bouncy Castle Crypto
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 17.3
Published: about 5 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlncDQtcXJmZi1jNjQ4
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 17.7
Published: about 6 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJqMngtaHg0Zy0yZ2Y0
In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 22.2
Published: about 6 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRtdjctY3E3NS0zcWpt
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 6 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXcyODUtd2Y5cS01dzY5
In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 22.2
Published: about 6 years ago
Low
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZqcW0tMjQ2Yy1td3Fn
In Bouncy Castle JCE Provider the other party DH public key is not fully validated
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 11.1
Published: about 6 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJydngtcHdmOC1wNTlw
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 22.5
Published: about 6 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFjajctZzJqNS1nN3Iz
In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 22.5
Published: about 6 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI5Y2gtbTRmaC1mYzdx
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 17.7
Published: about 6 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI5N3gtM2c4Zi1neDNt
The Bouncy Castle JCE Provider carry a propagation bug
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 22.5
Published: about 6 years ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM4eGYtbTRmZi1qY3hq
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 15.9
Published: about 6 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR2aGotOThyNi00MjRo
In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 22.5
Published: about 6 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhxajctajhqNS1mMnhy
Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator
Ecosystems: maven
Packages: org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14
Source: GitHub Advisory Database
Blast Radius: 22.5
Published: about 6 years ago
Statistics
Advisories: 20,668
Packages: 9,040
Repositories: 3
Ecosystems: 12
Filter by Severity
Moderate 8,836 High 7,269 Critical 3,070 Low 1,144
Filter by Ecosystem
maven 5,864 packagist 4,634 pypi 4,352 npm 3,812 go 2,295 nuget 1,552 cargo 882 rubygems 880 swift 33 hex 32 actions 20 pub 9
Filter by Package
org.jenkins-ci.main:jenkins-core 193 org.apache.tomcat:tomcat 132 com.fasterxml.jackson.core:jackson-databind 69 org.apache.struts:struts2-core 55 org.keycloak:keycloak-core 51 com.liferay.portal:release.portal.bom 46 org.apache.tomcat.embed:tomcat-embed-core 38 com.thoughtworks.xstream:xstream 37 org.xwiki.platform:xwiki-platform-oldcore 37 org.elasticsearch:elasticsearch 36 org.keycloak:keycloak-services 36 com.jfinal:jfinal 36 net.mingsoft:ms-mcms 35 io.undertow:undertow-core 34 org.jenkins-ci.plugins:script-security 33 org.apache.solr:solr-core 25 org.keycloak:keycloak-parent 25 org.springframework.security:spring-security-core 24 org.eclipse.jetty:jetty-server 24 org.bouncycastle:bcprov-jdk14 22 org.apache.nifi:nifi 21 org.apache.openmeetings:openmeetings-parent 21 org.cloudfoundry.identity:cloudfoundry-identity-server 20 org.xwiki.platform:xwiki-platform-web-templates 19 org.springframework:spring-core 19 com.vaadin:vaadin-bom 18 com.liferay.portal:release.dxp.bom 18 org.apache.geode:geode-core 17 org.apache.activemq:activemq-client 16 org.apache.dubbo:dubbo 16 org.apache.jspwiki:jspwiki-main 16 org.bouncycastle:bcprov-jdk15 16 org.apache.struts.xwork:xwork-core 15 org.apache.tomcat:tomcat-coyote 14 org.xwiki.platform:xwiki-platform-web 14 org.apache.inlong:manager-pojo 14 org.apache.hadoop:hadoop-main 13 org.apache.cxf:cxf 13 org.jenkins-ci.plugins.workflow:workflow-cps 13 org.apache.hadoop:hadoop-common 12 org.apache.dolphinscheduler:dolphinscheduler 12 com.vaadin:flow-server 12 org.bouncycastle:bcprov-jdk15on 12 org.jeecgframework.boot:jeecg-boot-parent 12 org.jenkins-ci.plugins:git 12 org.apache.camel:camel-core 11 org.apache.james:james-server 11 org.springframework:spring-webmvc 11 org.apache.jspwiki:jspwiki-war 11 org.apache.commons:commons-compress 11 org.apache.ranger:ranger 11 com.xuxueli:xxl-job 11 org.apache.tika:tika-core 11 org.igniterealtime.openfire:parent 11 org.jenkins-ci.plugins:email-ext 11 org.jeecgframework.boot:jeecg-boot-common 11 org.mortbay.jetty:jetty 11 org.apache.cxf:cxf-core 11 org.jboss.netty:netty 10 org.xwiki.platform:xwiki-platform-administration-ui 10 io.netty:netty 10 org.apache.inlong:manager-service 10 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 10 org.springframework:spring-web 10 org.apache.tomcat:tomcat-catalina 10 org.opennms:opennms 9 org.apache.shiro:shiro-core 9 com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer 9 org.jenkins-ci.plugins:electricflow 9 org.apache.archiva:archiva 9 org.craftercms:crafter-studio 9 cn.hutool:hutool-core 9 org.apache.linkis:linkis 9 org.opencrx:opencrx-core-models 9 org.apache.hive:hive 9 bootstrap 9 org.apache.tapestry:tapestry-core 9 org.webjars:bootstrap 9 twbs/bootstrap 9 org.apache.xmlgraphics:batik 9 bootstrap 9 org.opencms:opencms-core 9 io.jenkins:configuration-as-code 9 org.jenkins-ci.plugins:active-directory 9 org.bouncycastle:bcprov-jdk15to18 9 org.jenkins-ci.plugins:config-file-provider 9 org.apache.kylin:kylin 9 bootstrap 9 org.jenkins-ci.plugins:ec2 8 pyspark 8 org.apache.pdfbox:pdfbox 8 jquery 8 org.webjars.npm:jquery 8 jquery-rails 8 org.postgresql:postgresql 8 org.graylog2:graylog2-server 8 org.apache.ozone:ozone-main 8 org.apache.hive:hive-exec 8 mysql:mysql-connector-java 8 org.apache.zeppelin:zeppelin 8 org.apache.santuario:xmlsec 8 com.hazelcast:hazelcast 8 org.yaml:snakeyaml 8 org.apache.ambari:ambari 8 io.jenkins.blueocean:blueocean 8 org.apache.inlong:manager-web 7 org.apache.tika:tika 7 org.jenkins-ci.plugins:artifactory 7 org.apache.poi:poi 7 org.owasp.antisamy:antisamy 7 org.jenkins-ci.plugins:oic-auth 7 org.jenkins-ci.plugins:jobConfigHistory 7 org.jboss.resteasy:resteasy-client 7 org.apache.activemq:activemq-parent 7 org.jeecgframework.boot:jeecg-boot-base 7 io.dataease:dataease-plugin-common 7 net.opentsdb:opentsdb 7 org.apache.spark:spark-core_2.11 7 org.apache.cxf:apache-cxf 7 org.jenkins-ci.plugins:rundeck 7 org.apache.logging.log4j:log4j-core 7 io.jenkins.plugins:cavisson-ns-nd-integration 7 jQuery.UI.Combined 7 io.atomix:atomix 7 org.apache.hive:hive-service 7 org.jenkins-ci.plugins:openshift-deployer 7 org.apache.atlas:atlas-common 7 org.owasp.esapi:esapi 7 jquery-ui 7 org.silverpeas.core:silverpeas-core-web 7 io.jenkins.plugins:warnings-ng 7 org.jenkins-ci.plugins:mercurial 7 org.apache.karaf:apache-karaf 7 jquery-ui-rails 7 org.apache.derby:derby 7 org.jruby:jruby-stdlib 7 io.jenkins.plugins:miniorange-saml-sp 7 bootstrap-sass 7 bootstrap.sass 7 rubygems-update 7 org.jenkins-ci.plugins:subversion 7 jQuery 7 org.webjars.npm:jquery-ui 7 org.apache.syncope:syncope-core 6 org.xwiki.commons:xwiki-commons-xml 6 org.jenkins-ci.plugins:azure-vm-agents 6 com.google.protobuf:protobuf-java 6 org.infinispan:infinispan-core 6 org.jenkins-ci.plugins:pipeline-maven 6 org.jenkins-ci.plugins:gitlab-oauth 6 org.apache.storm:storm-core 6 org.jenkins-ci.plugins:ec2-deployment-dashboard 6 org.csanchez.jenkins.plugins:kubernetes 6 org.apache.struts:struts2-rest-plugin 6 tech.powerjob:powerjob 6 org.apache.mesos:mesos 6 commons-fileupload:commons-fileupload 6 org.apache.druid:druid 6 com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 6 org.opencastproject:opencast-kernel 6 com.xebialabs.deployit.ci:deployit-plugin 6 de.tum.in.ase:artemis-java-test-sandbox 6 org.jenkins-ci.plugins:repository-connector 6 com.jflyfox:jflyfox_jfinal 6 cn.hutool:hutool-json 6 hudson.plugins:project-inheritance 6 org.apache.pulsar:pulsar-broker 6 io.netty:netty-codec-http 6 org.apache.solr:solr-parent 6 org.apache.axis:axis 6 axis:axis 6 org.apache.shenyu:shenyu-common 6 org.jenkins-ci.plugins:fortify-on-demand-uploader 6 io.netty:netty-handler 6 org.opensearch.plugin:opensearch-security 6 org.apache.spark:spark-core_2.10 6 org.apache.httpcomponents:httpclient 6 org.bouncycastle:bcprov-jdk18on 6 org.neo4j.procedure:apoc 5 com.alibaba:dubbo 5 org.jenkins-ci.plugins:mailer 5 org.jenkins-ci.plugins.m2release:m2release 5 org.apache.zookeeper:zookeeper 5 org.jboss.resteasy:resteasy-bom 5 org.codehaus.jettison:jettison 5 org.xwiki.platform:xwiki-platform-appwithinminutes-ui 5 com.nimbusds:nimbus-jose-jwt 5 org.jenkinsci.plugins:octoperf 5 org.jenkins-ci.plugins:scriptler 5 org.jeecgframework.boot:jeecg-boot-base-core 5 com.mabl.integration.jenkins:mabl-integration 5 com.vaadin:vaadin-server 5 org.igniterealtime.openfire:xmppserver 5 org.jenkins-ci.plugins:gitlab-plugin 5 com.xuxueli:xxl-job-core 5 org.springframework.amqp:spring-amqp 5 org.apache.struts:struts-core 5 org.geoserver:gs-main 5 log4j:log4j 5 org.zenframework.z8.dependencies.commons:log4j-1.2.17 5
Filter by Repository
https://github.com/bcgit/bc-java 16 https://github.com/bcgit/bc-csharp 4