maven

org.bouncycastle:bcprov-jdk14

26 Total advisories

26 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.bouncycastle:bcprov-jdk14 is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

org.bouncycastle:bcprov-jdk14

Vulnerabilities

Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks

Bouncy Castle Has Covert Timing Channel Vulnerability

Bouncy Castle has an LDAP injection

Bouncy Castle Java Cryptography API vulnerable to DNS poisoning

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

Timing based private key exposure in Bouncy Castle

Bouncy Castle for Java on All (API modules) allows Excessive Allocation

Bouncy Castle crafted signature and public key can be used to trigger an infinite loop

Bouncy Castle For Java LDAP injection vulnerability

Bouncy Castle Denial of Service (DoS)

In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode

Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate

The Bouncy Castle JCE Provider carry a propagation bug

In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode

In Bouncy Castle JCE Provider the other party DH public key is not fully validated

Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values

Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator

In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification

Observable Differences in Behavior to Error Inputs in Bouncy Castle

Logic error in Legion of the Bouncy Castle BC Java

Out-of-Memory Error in Bouncy Castle Crypto

Browse more Maven advisories

Start Securing