In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed, it is possible with enough observations to identify when the decryption is failing due to padding.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade bouncycastle | Feb 20, 2019 | Jun 4, 2018 |
| Suse | — | Upgrade bouncycastleUpgrade bouncycastle-pg | Jun 16, 2018 | Jun 4, 2018 |
| Ubuntu | — | Upgrade libbcpg-javaUpgrade libbcpkix-javaUpgrade libbcmail-javaUpgrade libbcprov-java | Aug 8, 2018 | Jun 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub