The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos Cx | — | The vulnerabilities contained in this advisory can be addressed
by patching or upgrading to one of the versions listed below
AOS-CX 10.06.xxxx: 10.06.0180 and above
AOS-CX 10.07.xxxx: 10.07.0061 and above
AOS-CX 10.08.xxxx: 10.08.1040 and above
AOS-CX 10.09.xxxx: 10.09.0010 and above
Aruba recommends that users using the following branches
upgrade to 10.06.0180 and above to address these vulnerabilities:
AOS-CX 10.05.xxxx and below
None of the above branch versions will address the UEFI
vulnerabilities mentioned in ARUBA-PSA-2022-001. | Feb 24, 2025 | Feb 22, 2022 |
| Debian | — | Upgrade bouncycastle | Dec 22, 2017 | Dec 12, 2017 |
| Freebsd | — | Upgrade bouncycastle15Upgrade bouncycastle | Dec 31, 2017 | Dec 29, 2017 |
| Oracle Solaris | — | Upgrade runtime/erlang to version 21.0-11.4.6.0.1.1.0 on Solaris 11.4Upgrade runtime/erlang/documentation to version 21.0-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Dec 12, 2017 |
| Suse | — | Upgrade bouncycastle-javadocUpgrade bouncycastle-pgUpgrade bouncycastle | Jun 16, 2018 | Dec 12, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub