In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode

GHSA-2j2x-hx4g-2gf4 · CVE-2016-1000344

Published Oct 18, 2018 · Modified Sep 12, 2025

Description

In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2016-1000344
WEB https://github.com/bcgit/bc-java/commit/9385b0ebd277724b167fe1d1456e3c112112be1f
WEB https://access.redhat.com/errata/RHSA-2018:2669
WEB https://access.redhat.com/errata/RHSA-2018:2927
ADVISORY https://github.com/advisories/GHSA-2j2x-hx4g-2gf4
WEB https://security.netapp.com/advisory/ntap-20181127-0004
WEB https://www.oracle.com/security-alerts/cpuoct2020.html

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes