Vulnerability in Bouncycastle Bc-java
CVE-2007-6721
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures…
EPSS: 0.024 (82.3th percentile) — read the EPSS interpretation.
Affected products
- Bouncycastle Bc-java — versions 1.01, 1.02, 1.03
- Bouncycastle Bouncy-castle-crypto-package — versions 1.0, 1.01, 1.02
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)